Description

The entirety of the course is student centric, hands on, and lab intensive. On day one, students will be instructed on the use of the Peach Fuzzing Platform, from a practitioner's perspective, learning the ways in which Peach can be used to fuzz a variety of targets including network protocol parsers, ActiveX/COM interfaces, file parsers, APIs, and web services. Students will build and run fuzzers that target real world applications.

On the second day, students will be exposed to the internals of Peach for a developer's perspective. The Peach architecture and module interfaces will be explained in great detail as to equip students with the skills necessary to extend and adapt Peach to their custom needs. Students will then develop their own Peach extensions in a lab environment to reinforce these concepts.

Topics

Upon completion of this course, students will be enabled to create effective fuzzers that target:

• State-aware network protocol parsers

• N-tier applications

• Arbitrary APIs

• File parsers

• COM and Active/X components

• Extend the Peach Fuzzing Platform

• Apply these concepts and tools to their unique environment

• Utilize parallel fuzzing to increase fuzzing efficiency

Prerequisite Knowledge

• Ability to use Windows XP

• Ability to use WireShark

• Working knowledge of basic XML or HTML

Laptop requirements

• A laptop capable of running two Windows XP Virtual Machines

• Dual Core machine w/2GB of RAM recommended

• One of the following Virtualalization Platforms:

  • VMWare Server 2.0

  • VMWare Player 2.0 (FREE)

  • VMWare Workstation 6.x

• One of the following devices:

  • USB 2.0 port

  • Dual Layer DVD Drive

  • 1394/Firewire port

Instructor: Michael Eddington

No Bio.