Fuzzing Java code (JSoup) using Jazzer fuzzer - Java Security

Published: 23 March 2021
on channel: FuzzingLabs

4,796

📥 Download source code and materials: https://academy.fuzzinglabs.com/fuzzi...

In this course, I will fuzz a popular Java library (JSoup) in order to find uncaught Java exceptions. I will explain how to create a fuzzing harness for this target using the Jazzer fuzzer. Then, I will run it and show you what's happening when you trigger crashes.

#Fuzzing #Java #Exception

0:00 Presentation
1:04 Jazzer
2:32 Today's target (JSoup)
3:09 Installation/compilation of Jazzer
3:58 Find a good JSoup API
5:38 Write a Jazzer fuzz target
10:04 Modify the config files
12:45 Run the fuzzer
13:54 First crash (IllegalArgumentException)
15:45 Modify the code to throw this bug
17:36 Storing corpora between each run
19:53 Second crash (NullPointerException)

Further readings:
https://github.com/CodeIntelligenceTe...
https://blog.code-intelligence.com/fu...
https://security.googleblog.com/2021/...

==== 💻 FuzzingLabs Training ====
Rust Security Audit and Fuzzing: https://academy.fuzzinglabs.com/rust-...
C/C++ Whitebox Fuzzing: https://academy.fuzzinglabs.com/c-whi...
WebAssembly Reversing and Dynamic Analysis: https://academy.fuzzinglabs.com/wasm-...
Go Security Audit and Fuzzing: https://academy.fuzzinglabs.com/go-se...

==== 🦄 Join the community ====
https://academy.fuzzinglabs.com/fuzzi...

📡 Socials:
Twitter:   / fuzzinglabs
Telegram: https://t.me/fuzzinglabs
TikTok:   / fuzzinglabs

Keyword: Fuzzing, Fuzz Testing, Java, Jazzer, Maven, Bazel
Link to this video:    • Fuzzing Java code (JSoup) using Jazze...

On this page of the site you can watch the video online Fuzzing Java code (JSoup) using Jazzer fuzzer - Java Security with a duration of hours minute second in good quality, which was uploaded by the user FuzzingLabs 23 March 2021, share the link with friends and acquaintances, this video has already been watched 4,796 times on youtube and it was liked by 62 viewers. Enjoy your viewing!