FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
FormatFuzzer
is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format.
From a binary template for GIF, for instance, FormatFuzzer
produces a GIF generator - also known as GIF fuzzer.
Generators produced by FormatFuzzer
are highly efficient, producing thousands of valid test inputs per second - in sharp contrast to mutation-based fuzzers, where the large majority of inputs is invalid. By default, FormatFuzzer
operates in black-box settings, but can also integrate with AFL++ to produce valid inputs that also aim for maximum coverage.
FormatFuzzer is open source, available from the FormatFuzzer project page. Contributors are welcome!
For details on how FormatFuzzer
works and how it compares, read our paper for more info.
In the FormatFuzzer blog, we discuss how to address specific problems with FormatFuzzer.
All relevant events regarding current work are posted on Twitter.
We do not collect any data from this site, but Twitter does. See the Twitter privacy policy for details.