FormatFuzzer is a framework for high-efficiency, high-quality generation and parsing of binary inputs.
It takes a binary template that describes the format of a binary input and generates an executable that produces and parses the given binary format.
From a binary template for GIF, for instance,
FormatFuzzer produces a GIF generator - also known as GIF fuzzer.
Generators produced by
FormatFuzzer are highly efficient, producing thousands of valid test inputs per second - in sharp contrast to mutation-based fuzzers, where the large majority of inputs is invalid. By default,
FormatFuzzer operates in black-box settings, but can also integrate with AFL++ to produce valid inputs that also aim for maximum coverage.
In the FormatFuzzer blog, we discuss how to address specific problems with FormatFuzzer.
All relevant events regarding current work are posted on Twitter.