Locked Fuzzing Font Parsing

[Yard-Tools]

PacketstormSecurity Acaba de publicar lo siguiente:

 

[HIDE-THANKS]

 

This is the hidden content, please

• Sign In
• or
• Sign Up

 

[/HIDE-THANKS]

 

This article presents a cross-platform test harness written in Python that assists the user in searching for vulnerabilities in web browsers, specifically by fuzzing their font parsing functionality. The tool automates the delivery of test cases (font files in this context) into a web browser. The creation of a corpus of mutated TTF font files suitable for use in fuzzing is also covered.

This is the hidden content, please

• Sign In
• or
• Sign Up

10-23-2017 02:22 AM