flyr's Introduction

fuzz lightyear (flyr)

Description

fuzz lightyear is a block-based software fuzzing framework

Building flyr

flyr is built using SCons. You can install SCons and build on a Linux machine (or Cygwin) using the following command:

$ scons -j 4

Docker

Alternatively, this repository contains a Dockerfile and Scuba YAML file that allows you to build the project using docker. To build the docker image run the build.sh script. It will create an image tagged flyr-build:latest

A Scuba YAML file has been included in the project for use with Docker. To install Scuba, run the following command:

$ sudo apt-get install python-pip
$ sudo pip install scuba

Then, to build the project - simply run scuba build or scuba scons -j 4. You can also run flyr using scuba and the build docker image by prefixing your command with scuba.

Getting Started

$ cat ./examples/pcap.json

{
    "name" : "Pcap Fuzzing Model",

    /* Generate fuzzed pcap files in the current working directory */
    "output" : {
        "method" : "file-out",
        "directory-path" : "./",
        "name-suffix" : "lolwut.pcap"
    },

    "blocks" : {

        /* Write the Pcap Header */

        "magic_number" : {
            "class" : "number",
            "type" : "dword",
            "value" : "0xd4c3b2a1"
        },

        "version_major" : {
            "class" : "number",
            "type" : "word",
            "value" : "0x0002",
            "endianess" : "little"
        },

        "version_minor" : {
            "class" : "number",
            "type" : "word",
            "value" : "0x0004",
            "endianess" : "little"
        },

        ...

$ ./build/release/flyr.exe -f examples/pcap.json
* Loading flyr file and validating the JSON schema
* examples/pcap.json (Pcap Fuzzing Model) loaded successfully!
* Applying build actions...
*   -- magic_number
*   -- version_major
*   -- version_minor
*   -- thiszone
*   -- sigfigs
*   -- snaplen
*   -- network
*   -- ts_sec
*   -- ts_usec
*   -- incl_len
*   -- orig_len
*   -- eth_dst
*   -- eth_src
*   -- eth_type
*   -- ip_tos
*   -- ip_diff_services
*   -- ip_tot_len
*   -- ip_id
*   -- ip_frag_off
*   -- ip_ttl
*   -- ip_protocol
*   -- ip_check
*   -- ip_saddr
*   -- ip_daddr
*   -- udp_header_and_payload
* Processing mutations...
* Done.

$ ls
...
00000032-lolwut.pcap  00000033-lolwut.pcap  00000034-lolwut.pcap
...

$ file *
...
00000032-lolwut.pcap: tcpdump capture file (little-endian) - version 3.4 (Ethernet, capture length 65535)
00000033-lolwut.pcap: tcpdump capture file (little-endian) - version 0.4 (Ethernet, capture length 65535)
00000034-lolwut.pcap: tcpdump capture file (little-endian) - version 6.4 (Ethernet, capture length 65535)
...

More detailed documentation for flyr lives here

flyr's People

Contributors

Stargazers

Watchers

--- snip --- build/release/src/load.c:16:10: fatal error: parson/parson.h: No such file or directory #include "parson/parson.h" ^~~~~~~~~~~~~~~~~ compilation terminated. scons: *** [build/release/src/load.o] Error 1 --- snip ---

--- snip --- build/release/src/build.c: In function 'fixup_length_block': build/release/src/build.c:50:24: error: implicit declaration of function '__bswap16'; did you mean '__bswap_16'? [-Werror=implicit-function-declaration] word = __bswap16(word) + size; ^~~~~~~~~ __bswap_16 build/release/src/build.c:64:25: error: implicit declaration of function '__bswap32'; did you mean '__bswap_32'? [-Werror=implicit-function-declaration] dword = __bswap32(dword) + size; ^~~~~~~~~ __bswap_32 build/release/src/build.c:77:25: error: implicit declaration of function '__bswap64'; did you mean '__bswap_64'? [-Werror=implicit-function-declaration] qword = __bswap64(qword) + size; ^~~~~~~~~ __bswap_64 cc1: all warnings being treated as errors scons: *** [build/release/src/build.o] Error 1 scons: building terminated because of errors. --- snip ---

Recommend Projects

zznop / flyr Goto Github PK