Trapfuzzer - Coverage-Guided Binary Fuzzing with Breakpoints

Explore coverage-guided binary fuzzing with breakpoints in this comprehensive conference talk from HITB2021SIN. Dive into trapfuzzer, a powerful tool developed in Python and C that offers real-time test status monitoring, mutation relationship tracking, and visualized basic block execution. Learn about the tool's architecture, including its Python-based fuzz scheduling and data mutation modules, as well as its GDB plugin or custom debugger-based instrumentation module. Discover how trapfuzzer supports i386/x64 architectures and can be adapted for others like ARM. Gain insights into the tool's effectiveness, having uncovered over 200 vulnerabilities in WPS Office and other software. Follow along as the speaker demonstrates fuzzing WPS, explains GDB internals, and discusses future plans for trapfuzzer. Whether you're a security researcher or software developer, this talk provides valuable knowledge on advanced fuzzing techniques and vulnerability discovery.