Fuzzing with radamsa - Short

Radamsa is a test case generator for robustness testing, a.k.a. a fuzzer. And it does it super well. Perfect for rapid prototyping.

-=[ 🔴 Stuff I use ]=-

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

[LiveOverflow]

I can't believe that I have to say this... But this is not an ad. I think it's just a super useful and not well known tool. It's open source, it's free, there are no commercial interest whatsoever. I'm excited about it and think it deserves to be shared, and at the same time I was able to showcase what basic fuzzing is.

[rage]

For april fools you should change your pfp to shrek and rename your channel live ogreflow

[snador]

Tool reviews like this are actually pretty helpful and cool, keep doing this kind of stuff please!

[TheSweMaster]

Always struggled getting good data for input test cases, so this will be really helpful! :)

[newgothwhosdis]

I can see the potential, really smart program!

[AlboCoder]

The best fuzzer I have ever used is AFL. Very powerful and has tons of features, but to get started I think this radamsa is a good idea. AFL can get really complicated.

[dgn]

Have you met John the Rippers cousin? radamsa the fuzzer? lolcat

[SourceCodeDeleted]

Perhaps I am weird, but I don't want to run a fuzzer multiple times like this.

[jacobgreenberg]

How would you recommend recording and analysing relevant crashes with this?

[TheGrimravager]

inb4 you end up with ice9.exe (person of interest reference)

[UsmanAbdulHalim]

Any way to fuzz a shared-lib via radamsa? Like, test all the function without needing to create a separate binary to test.

[jareksmiejczak]

+LiveOverflow If you'll ever land/end up in Poland -> I want to have a beer with You. I'm watching your videos week to week (together with Gynvael's channels). Thank you for everything! Radamsa looks so interesting!

[MrKristian]

Added to favorites so I could do this when I get more experience ;)
Maybe I'll revisit this video in a few years

[mossy]

could you please tell me what software do you use for your videos?

[justanormalperson]

how have i never heard of this amazing tool? :D

[kryptikmind]

Does it work for Web service fuzzing or just software ?

[Desam]

well you said one thing at the and: "if you have an xml parser this is really good test input.." . but what you actually want to say is: if you are writing an xml parser on your own, that is really good test input. if you use one of the main xml parsers, the program behind that parser will probably never crash, because radamsa just generates non-xml that will be ignored by the xml parser.

[hikaru-live]

pipe radamsa into a serial port = fuzzing some embedded firmware. Compromises made for the limited resources can introduces bugs.

[rohitux]

sir how did you learn so much of things. Is you learn from your college or somewhere else sir please tell me.

[orelg]

T󠁮hanks, nice videnks, nice videnks, nice videnks, nice vide%do!