How I found 3 bugs in Google’s Go code using Fuzzing (go-fuzz) - Go Security #2

In this second Go fuzzing course, I will use the famous go-fuzz fuzzer to find bugs inside the official debug/efl library. I will first identify one interesting method to fuzz and then write a fuzzing harness. Finally, I’ll run the fuzzer and show you some of the bugs triggered.

#Fuzzing #Golang #gofuzz

00:00 Introduction
00:30 Take a look at the target (debug/elf)
01:14 Which method to fuzz? (elf.NewFile)
03:06 Compilation (Makefile)
05:10 go-fuzz 101
06:42 Run the fuzzer
07:34 Taking a look at the crashes
09:21 Going deeper
10:40 SPECIAL Go Training presale

==== 💻 Go Security Audit and Fuzzing Training ====

==== 🦄 Join the community ====

==== 📡 Socials ====

Keywords: Fuzzing, Fuzz Testing, Go, Golang, go-fuzz