Skip to main content
18 votes

What are some ways to pass raw bytes to a program via the Linux terminal?

If you need null bytes, you can write them to a file and use the file as input for the program, e.g.: echo -e -n "\x00\xFF\xAB" > file.bin program < file.bin You can use also use xxd ...
Igor Skochinsky's user avatar
  • 36.8k
11 votes
Accepted

What are some ways to pass raw bytes to a program via the Linux terminal?

Use echo -e and pipe to your program's input. Example: echo -e "\x41\x42\x43\x44" | <executable> Will write ABCD as input. edit: You can pass null-bytes
Yotamz's user avatar
  • 1,272
2 votes

Code Coverage - Fuzzing

Binary-level code coverage analysis can be done either statically or dynamically. Static instrumentation can, among other things, offer drastic performance improvements over dynamic tools like Pin. ...
Codoka's user avatar
  • 403
2 votes
Accepted

Android application fuzzing

There is a fork of AFL fuzzer that is specialized in Android fuzzing. You can find it on GitHub. And, there are several fuzzing frameworks specialized for Android. References Andoid-afl. Fuzzing with ...
perror's user avatar
  • 19.1k
1 vote

Detect interesting testcases

If you want to discover new test cases (or check that a test case is valuable) on a binary, the good way to go is to use tools such as KLEE (see this small tutorial). The point is too use symbolic ...
perror's user avatar
  • 19.1k
1 vote
Accepted

Approach for fuzzing interactive CLI

Thanks to @julian's comment, I was able to search for more relevant terms. For this particular case, I decided to use AFL's dictionary mode, where you can give it a list of words that make up the ...
multithr3at3d's user avatar
1 vote

Modern methods of fuzzing/locating heap bugs and potential vulnerabilites

Great tool to achieve this in Windows is Application Verifier. The general idea is that you run your program with different heap inspections, using the verifier. For example - each allocation made ...
macro_controller's user avatar
1 vote

Fuzz Test Suite for C/C++ Command Line Argument/Standard Input programs

This is not a question about reverse engineering, but you can use the DARPA Cyber Grand Challenge binaries that have been ported to Linux, Mac OS and Windows by the Trail of Bits team: The DARPA ...
julian's user avatar
  • 7,176

Only top scored, non community-wiki answers of a minimum length are eligible