Fuzzing with Sulley

Robert Larsen <[email protected]>
Newsgroups gmane.comp.security.basics
Message-ID <[email protected]>
Hi

I am learning the ins and outs of fuzzing with Sulley using
vulnserver.exe as a learning platform.
It works great...well, almost.

Vulnerabilities are found, vulnserver crashes and is restarted by the
process monitor. But the fuzzing script does not think so:

[2012-10-12 16:04:38,535] [ERROR] -> ntdll.dll:7c9377c9 push esi from
thread 9816 caused access violation
[2012-10-12 16:04:38,535] [WARNING] -> restarting target process
[2012-10-12 16:04:43,552] [CRITICAL] -> Restarting the target failed,
exiting.
robert-workstation:~/Fuzzing/vulnserver_fuzzer $ telnet localhost 9999
Trying 127.0.0.1...
Connected to localhost.
Escape character is '^]'.
Welcome to Vulnerable Server! Enter HELP for help.
EXIT
GOODBYE
Connection closed by foreign host.
robert-workstation:~/Fuzzing/vulnserver_fuzzer $

Simply rerunning the fuzzer script continues the session so I do this:
robert-workstation:~/Fuzzing/vulnserver_fuzzer $ while true; do python
vulnserver_session.py ; done

This seems to work, but is a rather ugly hack and shouldn't be necessary.
Any ideas what I am doing wrong ?

Robert
signature.asc (application/pgp-signature, 259 B)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlB4JawACgkQzDMeisFqGZbaHACg8PlBfVdes0iFJpzzqMHYTBwh
2EMAnjX+DQqbZi0oiJs/roOuX2TNoMjv
=NH/z
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.