0

I want to contribute to vendors while learning how to be a security researcher, and I was wondering: How can I fuzz third party windows drivers? (For instance, those that come with cpu/gpu and similar third party drivers).

Additionally, Is it possible to use sanitizers if I don't have the code? (are there any for windows drivers?)

What is the proper path for targeting those? fuzzing ioctls? trying to generate crashes based on different access methods?

Would be glad if you could also explain the proper mindset when fuzzing drivers, what do you look for, what is your "game plan" and similar.

Notes:

  • I am talking about kernel mode drivers
  • Aside from driver verifier or in addition to it.

Thank you!

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.