Finding Bugs in Python code using Fuzzing (pythonfuzz AFL fuzzer) - Python Security #1

In this course, I will first select a popular Python package and find some code source example using interesting methods to fuzz. Then, I’ll explains how to create a pythonfuzz fuzzing target and how to customize it. Finally, I’ll show how to run the fuzzer and explain some particularity of pythonfuzz.

#Fuzzing #Python #pythonfuzz

0:00 Description of pythonfuzz
1:04 Install pythonfuzz
1:30 Select the target to fuzz (pyasn1)
2:12 Find some example code to start with
3:20 Create the fuzzing harness
5:18 Run the fuzzer without setting the exception
6:08 Find the Errors to handle
6:38 Run the fuzzer with proper exception handling
8:02 pythonfuzz options/arguments
8:49 Going deeper

==== 💻 FuzzingLabs Training ====

==== 🦄 Join the community ====

==== 📡 Socials ====

Keyword: Fuzzing, Fuzz Testing, Python, Pypi, package, pythonfuzz, libfuzzer

[porasvedi]

Nice Tutorial, Do you have any tutorial for Fuzzing for Microservices?

[nierodwirski]

Thank you for this nice tutorial.
But is it required to create separate fuzzing harness inside of a new file?
I have many source files (all must be running) and need to fuzz part of private method of some class (it will actually trigger code in multiple other files as well). When I try to insert fuzzing harness inside of existing script itself, it just replaces original ArgumentParser and script fails to run because it can't find expected ARGV.