Code coverage and fuzzing

While protocol specifications and application definitions can be used for fuzzing, the interdependencies of fields and messages within protocols, including state, are not always obvious. Various reverse engineering tools exist for compiled binaries including, IDA pro and Pai Mei. But when you have the source, why not use it? Lcov is another open source tool that generates coverage information from multiple runs of the target and it’s primary purpose is to provide top-line summaries of directories and files. Rcov is a WEBrick application that uses the compile/runtime output generated by gcov, uses the browser for navigation.

Read more…


Leave a Reply

You must be logged in to post a comment.