Comments (7)
I am taking a look at the several discussions on this topic to learn about the issues and desired enhancement.
from boofuzz.
[First of all: Is it better to discuss this issue here or on the mailing list thread?]
I really need this feature, and I'm thinking about giving it a shot in the next few days. I saw some directions on the code I'd need to touch on the mail, so I'll start trying to implement it.
I've tried the sulley_l2 pointed out in the mail thread as well, but it gives me the same packet here (with padded bitfields).
from boofuzz.
from boofuzz.
This one will be really useful. As a solution we could somewhat combine two bitfields with shift and or.
The algo may be quite simple, assume that FIRST and SECOND is a bitfields then we can combine it just like that:
FIRST << 8 - FIRST.width | SECOND
will work if FIRST and SECOND is a big-endian bitfields
from boofuzz.
@ptdropper Feel free to drop any discussion Qs here. Cheers!
from boofuzz.
I spent time digging into the code and I cannot see that it has the ability to support bit field manipulation. I also see the strong potential for user disagreement on endianess interpretation so to make this work there needs to be some clear definitions on which bit we are manipulating. So - I am concerned that this may be a fruitless effort. I need some advice from this group and discussion on what we could hope to achieve.
Thanks for the reminder! I look forward to keeping this discussion going.
Currently my open source contribution time is being used on my other open source project: https://github.com/CycloneDX/cyclonedx-buildroot which is making progress as a new project.
from boofuzz.
@ptdropper This is not a trivial change at the moment, certainly, but the requirements are basically to allow BitField to take a number of bits not divisible by 8. What questions about endianness do you have in mind?
from boofuzz.
Related Issues (20)
- Problem with web interface (port: 26000) HOT 8
- Mirror primitive always returns the default value of the target primitive HOT 2
- How to use s_from_file()?It will cause some errors HOT 2
- How can I run boofuzz with 0.0.0.0 host IP HOT 2
- `Session.fuzz()` options to minimize redundant testcases HOT 3
- No boo utility HOT 2
- boofuzz/sessions.py is too long and complicated, let's fix that. HOT 8
- Session.fuzz_by_name is deprecated in favor of Session.fuzz(name=name). HOT 1
- "Aligned" definition function's implementation is incorrect,modify the encode method HOT 3
- Replace deprecated PyDbg library with a Python 3-based debugger
- http with multi-connect :session.connect(s.get"xxx") HOT 11
- Block "dep_value" Request is type bytes HOT 1
- usage for s_bits() HOT 4
- Test failure HOT 3
- ChildProcessError: [Errno 10] No child processes and module 'os' has no attribute 'WCOREDUMP' HOT 4
- The callback can not capture response when fuzzing http , because the boofuzz send tcp-fin before response . HOT 5
- Potential bug fix in session.py
- Group primitive: Value of default_value cannot be used in fuzzing HOT 1
- AttributeError: 'bytes' object has no attribute 'encode'. Did you mean: 'decode'?
- How to calculate the checksum for ICMPv6 protocol during fuzz testing?
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from boofuzz.