Skip to content

Commit

Permalink
fix
Browse files Browse the repository at this point in the history
  • Loading branch information
TinySec committed Oct 28, 2016
1 parent dfbee57 commit a4cde82
Show file tree
Hide file tree
Showing 2 changed files with 11 additions and 7 deletions.
11 changes: 6 additions & 5 deletions article/about_fuzz/about_fuzz_cn.md
Original file line number Diff line number Diff line change
Expand Up @@ -47,10 +47,10 @@ bug != vul ,一些漏洞虽然是一些简单的bug , 一些漏洞其实也是
的时间必不可少,俗称“踩点” ,了解系统在哪里解析外部的数据,怎样用分层的思想,直接的测试这个子系统。

整个流程就是,
1.发掘黑盒系统里解析外部数据的子系统
2.分层化测试这个子系统
3.捕获系统由于解析产生的“异常”
4.分析这些异常
1. 掘黑盒系统里解析外部数据的子系统
2. 层化测试这个子系统
3. 获系统由于解析产生的“异常”
4. 析这些异常

但由于时间成本的关系, 通常只会关心一些具体的表现,比如 调试器捕获的中断,verifier捕获的BSOD。

Expand Down Expand Up @@ -78,5 +78,6 @@ js-kernel-fuzzer 目前只做到了第三点,和部分的第四点,还需要
总结,fuzz是一个很有用的方法,也是一种很复杂的思路。
各个厂商自己也越来越重视fuzz , 以后挖掘的难度也会越来越高。
以上,只是自己挖掘的一点浅显的总结。
### 当你觉得已经理解了fuzz时,再好好想想。

### 当你觉得已经理解了fuzz时,再好好想想

7 changes: 5 additions & 2 deletions article/about_fuzz/about_fuzz_en.md
Original file line number Diff line number Diff line change
Expand Up @@ -46,7 +46,7 @@ Faced with a large black box system, fuzzer the high cost of time, so we save as
Of the time essential, commonly known as "check out the location" to understand where the system analysis of external data, how to use layered thinking, direct testing of the subsystem.

The whole process is,
1. Explore the black box system to resolve the external data subsystem,
1. xplore the black box system to resolve the external data subsystem,
2. Hierarchical testing of this subsystem
3. Capture system due to the analysis of the "abnormal"
4. Analyze these exceptions.
Expand Down Expand Up @@ -78,4 +78,7 @@ Summary, fuzz is a very useful method, but also a very complex idea.
Each company itself more and more attention to fuzz, after the difficulty of mining will be more and more high.
Above, just a little thinking about fuzz of mine.

## When you think you had understood the fuzz, think about it again.

## When you think you had understood the fuzz, think about it again


0 comments on commit a4cde82

Please sign in to comment.