http://phed.org The Rantings of Michael Eddington Thu, 07 Aug 2008 05:16:06 +0000 http://backend.userland.com/rss092 en   The first Peach training at Blackhat finished today and it was a blast.  This first class had about 18 people in it writing fuzzers for PNG, QuakeWorld, Yahoo! IM Client, and Quicktime.  Everyone learned allot, we found a number of bugs, and we are planning on many improvements to ... http://phed.org/2008/08/04/first-peach-training/ A big thanks to Chris Clark who found the second patch worthy bug. This is a gnarly bug in the Mutator code that would sometimes cause a mutator to get skipped.  Chris is also the first to submit a new custom mutator that will be included in next release Peach ... http://phed.org/2008/06/15/peach-21-beta3-bug-patch-2/ I've had a few emails about fuzzing file formats consumed by GUI application, these are applications that display a window such as image viewers, movie players, etc.  Included in Peach 2.1 is good support for fuzzing these types of applications on Windows.  People on OS X and Unix are sadly ... http://phed.org/2008/06/13/peach-21-fuzzing-gui-applications/ Peach 2.1 includes a much improved mechanism for performing what I call data fix-ups were we calculate checksums required to make our data correct.  Many protocols and most file formats include some form of checksum field to verify that data was not corrupted.  When we generate/mutate data we want to ... http://phed.org/2008/06/13/peach-21-fixups-checksums-crc32s/ Well it was bound to happen, the first "stupid developer" (that's me ;) bug was reported.  I have a patched posted up to the mailing list.  This bug affects the <Number> element when specifying valueType="hex" values.  Additionally, I fixed the Tutorial_DHCP-Request.xml so it works with beta3. Thanks to David for ... http://phed.org/2008/06/13/peach-21-beta3-bug-patch/ Peach 2.1 BETA3 exposes the mutators used by Peach to perform fuzzing.  Each mutator performs a specific mutation.  Custom mutators can be created and included, additionally the order in which mutators are used can be customized for all fuzzers down to specific tests. First up lets take ... http://phed.org/2008/06/13/peach-21-exposed-mutators-part-1/ This is the first in several articles covering some of the new features in Peach 2.1 BETA3.  In this article I will cover the new <Hint> element.  This element was added to allow metadata that can be used by different mutators to be added to the data model.  For example, ... http://phed.org/2008/06/13/peach-21-mutator-hints/ This new beta includes a lot of changes and makes Peach feature complete for the 2.1 release coming in the next month or so.  Many of the changes were internal clean ups.  The internal DOM is now much cleaner and easier to use, as is the API to the ... http://phed.org/2008/06/12/peach-21-beta3-released/ The past ph-neutral security conferences in Berlin I have attended were all very fun, laid back, and informative.  The European security "underground" scene is highly refreshing after so many high cost US conferences.  Additionally the people are excellent and provide for good conversations.  This years ph-neutral was no exception and ... http://phed.org/2008/05/25/peach-ph-neutral-0x7d8/ The Microsoft .NET Framework provides the developer with a number of advanced features such as P/Invoke and unsafe code blocks.  This article will take a look at unsafe code blocks and some of the security issues that should be looked for when reviewing or writing such code. First off, ... http://phed.org/2008/05/22/net-unsafe-security-issues-part-1/