I want to contribute to vendors while learning how to be a security researcher, and I was wondering: How can I fuzz third party windows drivers? (For instance, those that come with cpu/gpu and similar third party drivers).
Additionally, Is it possible to use sanitizers if I don't have the code? (are there any for windows drivers?)
What is the proper path for targeting those? fuzzing ioctls? trying to generate crashes based on different access methods?
Would be glad if you could also explain the proper mindset when fuzzing drivers, what do you look for, what is your "game plan" and similar.
- I am talking about kernel mode drivers
- Aside from driver verifier or in addition to it.