Requirements

• python >= 2.6

• fuzzer (zzuf, autodafe, …)

• gdb, valgrind (both are optional)

Features

• independent of underlying fuzzer

• highly configurable

• built to be extendible

• automation friendly

Supported fuzzers

• zzuf (mutation)

• autodafe (generation)

• plain (debugging purposes)

Usage

• install requirements

• install dfuzz (for example easy_install dfuzz)

• create a working directory

• supply fuzz.conf file (sample follows)

• according to the modules you want to use, create mut or gen directory in your working directory and supply a file to fuzz or a template to use

• run dfuzz -d -o name_of_the_working_directory

• observe output

• if everything is fine remove the -d and -o options and run the command again

• check the samples directory created in your working directory

• use included incident_viewer to browser incidents if there are any

Complete documentation in docs directory.

Sample fuzz.conf file

[global]
binary=libvirtd
args=-f FUZZED_FILE --verbose
threads = 1
timeout = 2

generation  = 0
mutation    = 1
combination = 0

[generation]
modules  = dfuzz.gen.autodafe
priority = high

[mutation]
modules = dfuzz.mut.zzuf; dfuzz.mut.plain
priority = high

[combination]
modules = dfuzz.comb.simple
priority = low

In it’s simplest form, dfuzz can be used as a zzuf wrapper with enhanced detection and reporting capabilities.