Today I'm sharing an IE Fuzzer, which was developed almost from scratch. Like many other softwares, browsers can also be fuzzed in two ways, a) Static and b) Dynamic.
Dynamic browser fuzzers are very popular, due to its speed, since they are purely written in JavaScript. However one common problem software security auditors face, while fuzzing browser dynamically, is 'Crash Reproduction'. You have to very careful while crafting your JS browser fuzzer (by placing logging code in right place), otherwise crash will not be reproducible.
Another option is, Static fuzzer. If you are fuzzing browsers using Static Test Cases, in 99% cases 'A crash' == 'A reproducible crash'.
How does 'IEFuzz' work?
- Launch IE
- Attach 'iexplore.exe' to debugger(pydbg) - To monitor any type of crash(Both in parent and child process).
- Generate a test case (html + javascript).
- Load the test case locally as file (file://c:/fuzzer/testcases/temp.html)in IE using win32COM.
- If no crash, re-generate a html test case and reload the test case using win32COM.(Note, we are not closing, re-opening IE here, We are just refreshing the same page but code/content of the page is different in every time. Which saves time significantly )
- In case of any kind of access violation, copy/save the test case to separate folder, and kill IE completely.
- Go to step 1
This Static IE fuzzer is written in python. And following modules were used.
- pywin32com - Load / Reload *.html Test Cases
- pydbg - Monitor IE for Access Violation / Guard Page Violation.
- paimei - For crash dump generation.
Required Configuration Changes in IE
To run this Fuzzer you have to make following changes in IE:
1. Since this fuzzer loads the test cases locally (eg. file://c:/fuzzer/testcases/temp.html) as .html file.
You must turn off IE's ActiveX warning prompt by following below instructions.
Tools (menu) -> Internet Options -> Security (tab) -> Custom Level (button) -> Disable Automatic prompting for ActiveX controls.
2. You also need to disable IE protected mode to be able to control Internet Explorer using Python 'win32com'. Please be aware of the risks.
-> Internet Options -> Security -> Trusted Sites : Low
-> Internet Options -> Security -> Internet : Medium + unchecked Enable Protected Mode
-> Internet Options -> Security -> Restricted Sites : unchecked Enable Protected Mode
Writing Test Cases:
You can write you own static test case generator for this fuzzer in python. You have to place it inside /TestCases folder. For your reference one sample is given here 'TestCases/SampleTestCase.py'. While writing test cases do remember, it should have a 'TestCase' class and 'getFinalTestCase()' method in it. This getFinalTestCase() method should return the entire html page.
In case of dynamic fuzzer, attributes of different html elements extracted from object and fuzzed on the fly at runtime , since its a static fuzzer we can pre define html elements and their attributes our test case as python dict.
attr = {'CANVAS':['height','width','getContext', ... , ... , ... ]}
For this attribute list generation, one JavaScript application is provided here : MiscTools/Generate_Elements_Dict.html
Source Code:
Source code of IEFuzz is available for download @ my github page.
Licence:
This software is licenced under BEER WARE licence although the following libraries are included with 'IEFuzz' and are licensed separately.
- pydbg
- paimei - https://github.com/pedramamini/paimei
Running This Fuzzer:
One video demo is available here, on how to run this fuzzer and reproduce crashes.
Happy Fuzzing :) :)
Regarding all aspects the blog was perfectly nice.
ReplyDeleteManual Testing Training in Chennai
Manual Testing courses in Chennai
Manual Testing Course
Mobile Testing Training in Chennai
mobile testing course in chennai
Mobile Testing Training
Manual Testing Training in Chennai
testing courses in chennai
definately enjoy every little bit of it and I have you bookmarked to check out new stuff of your blog a must read blog! Speed Test Etisalat
ReplyDeleteGreat Article
ReplyDeleteCyber Security Projects for CSE Students
Project Centers in Chennai
JavaScript Training in Chennai
JavaScript Training in Chennai
The article is so informative. This is more helpful for our
ReplyDeletebest software testing training in chennai
best software testing training institute in chennai with placement
software testing training
courses
software testing training and placement
software testing training online
software testing class
software testing classes in chennai
best software testing courses in chennai
automation testing courses in chennai
Thanks for sharing.
This is the first & best article to make me satisfied by presenting good content. I feel so happy and delighted. Thank you so much for this article.
ReplyDeleteLearn Best Digital Marketing Course in Chennai
Digital Marketing Course Training with Placement in Chennai
Learn Digital Marketing Course Training in Chennai
Digital Marketing Training with Placement Institute in Chennai
Thanks for sharing an informative blog keep rocking bring more details.I like the helpful info you provide in your articles. I’ll bookmark your weblog and check again here regularly. I am quite sure I will learn much new stuff right here! Good luck for the next!
ReplyDeleteWeb Designing Training Institute in Chennai | web design training class in chennai | web designing course in chennai with placement
Mobile Application Development Courses in chennai
Data Science Training in Chennai | Data Science courses in Chennai
Professional packers and movers in chennai | PDY Packers | Household Goods Shifting
Web Designing Training Institute in Chennai | Web Designing courses in Chennai
Google ads services | Google Ads Management agency
Web Designing Course in Chennai | Web Designing Training in Chennai
Thank you for excellent article.Great information for new guy like antimalware service executable
ReplyDeleteUtilizing any of the above strategies won't just get your site punished in search rankings, it will more than likely get your site restricted from web indexes through and through. small business website seo services
ReplyDeleteGoogle figures that if many individuals are visiting your site and investing energy in it then your site must have significant or intriguing data on it and they will rank your site in like manner.
ReplyDeleteWe are very happy with backlinks from marketing1on1
Satellite broadband access makes use of two way communications between a subscriber and the satellite itself to deliver the Internet at broadband speeds. Unlimited wireless internet provider
ReplyDeleteseaport hack Excellent trick this great friend, this was what I was looking for a long time and finally something that works. I recommend them all if it is real is not a lie. Thanks friend. Keep it up
ReplyDeleteGlad to chat your blog, I seem to be forward to more reliable articles and I think we all wish to thank so many good articles, blog to share with us. power lead system
ReplyDeleteharry potter iphone wallpaper
ReplyDeleteWe are the famous company of Movers and packers Dubai and packers and movers Dubai because we always take care of customer satisfaction and needs. We are the licensed and accredited moving company that provides all kinds of relocation services with grab discounts. We have well and educated teams who can work with honest and safely and securely. They don’t any hidden charges or bad behavior to their customers. Customer satisfaction and happiness are very important things.
ReplyDeletePackers and movers Dubai
Movers and packers Dubai
Packers movers Dubai
Dubai movers packers
RC MOVERS PACKERS is famous for Home movers Dubai and Office movers Dubai that can provide comprehensive solutions for residential and commercial relocation services in your areas. We have top-level staff who are very talented and very honest in house movers Dubai and office movers Dubai fields. They provide a complete solution for all kinds of relocation services in your locality. So if you need a house, office, and villa movers service.
ReplyDeletehttps://www.reddit.com/r/HomeworkCentral/comments/bs4ibd/need_help_about_my_homework_it_goes_like_this/
ReplyDeleteSAVE YOUR HOME is the well-trained company of Ac repair service in Dubai that can give you stressed out service in your locality. We have educated teams who can repair all types of Air conditioning repair unit like Central air conditioning, Window air conditioning, Portable air conditioning, geothermal air conditioning, Split air conditioning and chiller plants. We have many over 10 years of experience in air conditioning repair and installation and maintenance. Call us.
ReplyDeleteAc repair and service
Air conditioning service and maintenance Dubai
Ac repair service Dubai
The procedure is automated so you don't have to actively seek contact information ongoing to create a gigantic database. best internet provider toronto
ReplyDeleteGoogle offers advertisements which appear in search results on google.com with the use of Google AdWords or advertisements that
ReplyDeleteappear on other websites through the Display Network and Google’s AdSense program.
With google ads you can appear in the top for searched keywords.Thus you will receive more relevant customers for your business.
Google Ads Services
You can get Apple-certified repairs and service at the Apple Store or with one of our Apple Authorized Service Providers.
mobile phone repair in North Olmsted
Eagle Technical services is a highly professional company all over Dubai. we can provide you the best service at a lower cost for a House wall painting service, Wall painting service, Interior wall painter, and Wall painting Dubai service. Do you want good service? call me today and get great services.
ReplyDeleteThis comment has been removed by the author.
ReplyDeleteDo you need Samsung LED TV repair Dubai service? We have the best teams for Samsung LED TV repair service who can offer you quality service. Just contact us.
ReplyDelete다음에 블로그를 읽을 때 이것만큼 실망하지 않았 으면 좋겠다. 제 말은 제가 읽기로 선택한 것이지만 사실 당신이 할 말이있는 것 같았어요. 내가 듣는 모든 것은 당신이 관심을 얻기 위해 너무 바쁘지 않았다면 고칠 수있는 것에 대해 징징 거리는 것입니다. 먹튀검증사이트
ReplyDeleteThank you for sharing.
ReplyDeleteData Science Online Training
Python Online Training
Salesforce Online Training
They can be tips related to numerous composition categories, including college applications and complex assignments like Kaplan assignment help 먹튀검증
ReplyDeleteYou have done a amazing job with you website braces in tijuana
ReplyDeleteYour post is very good and unique. I am eagerly waiting for your new post.
ReplyDeleteimpact of social media marketing
artificial intelligence uses
artificial intelligence technology today
use of php language
rpa developer jobs
salesforce integration interview questions
Thanks for your marvelous posting! I actually enjoyed reading it, you could be
ReplyDeletea great author.I will remember to bookmark your blog and will
eventually come back from now on. I want to encourage you to토토
continue your great
writing, have a nice weekend!
Aivivu chuyên cung cấp vé máy bay, Tham khảo
ReplyDeletevé máy bay đi Mỹ Vietnam Airline
máy bay từ mỹ về việt nam
vé máy bay đi Los Angeles giá rẻ 2021
các đường bay từ canada về việt nam
Mua vé máy bay tại Aivivu, tham khảo
ReplyDeletevé máy bay đi Mỹ giá rẻ 2021
có vé máy bay từ mỹ về việt nam chưa
é bay từ nhật về việt nam
khi nào có chuyến bay từ canada về việt nam
와우, 내가 찾은 훌륭한 게시물 먹튀검증
ReplyDeleteThanks for valuable posts that encourage us to come on your site. I know it takes huge patience and dedication to craft such informative articles. Anyway, I have written a informative post to someone who is interested in knowing about Bihar Sharif Pin Code
ReplyDelete.