lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date: Fri, 6 Mar 2009 18:37:01 -0500
From: Jeremy Brown <0xjbrown41@...il.com>
To: full-disclosure@...ts.grok.org.uk
Subject: Re: List of Fuzzers

Don't act like you've gave any constructive advice to anyone in your life.

Thanks for trolling, please don't come again.

On Fri, Mar 6, 2009 at 6:21 PM, Pete Licoln <pete.licoln@...il.com> wrote:
> Ok cool, then keep it up Jeremy.
> At least you wont be able to say no one told you.
>
> 2009/3/6 Jeremy Brown <0xjbrown41@...il.com>
>>
>> I consider you a loser, Pete/Julio/Loser.
>>
>> On Fri, Mar 6, 2009 at 3:03 PM, Pete Licoln <pete.licoln@...il.com> wrote:
>> > Well .. what i say is true.
>> > If you cant argue on the subject then shut the hell up.
>> >
>> >
>> > 2009/3/6 Rubén Camarero <rjcamarero@...il.com>
>> >>
>> >> Dont satisfy this idiot with a response, thats what he likes..
>> >> Everybody
>> >> knows Petie is a troll on every list just use google
>> >>
>> >> On Fri, Mar 6, 2009 at 10:56 AM, Jeremy Brown <0xjbrown41@...il.com>
>> >> wrote:
>> >>>
>> >>> The reason anyone writes a fuzzer is to find bugs. Those that I have
>> >>> written are of course for the same purpose as the 101 listed: to find
>> >>> security bugs. Your ideas are as meaningless and unhelpful as they
>> >>> have been in the past. You have no goal but to troll and try to make
>> >>> people look like fools, but you are clearly the ignorant one.
>> >>>
>> >>> What have you ever written? Let us see some of your code to poke fun
>> >>> of. If it is as imperfect as you then we'd have a day of fun.
>> >>>
>> >>> >What's hilarious is that none of them are usefull :)
>> >>>
>> >>> http://www.milw0rm.com/author/1531
>> >>> http://www.milw0rm.com/author/1835
>> >>>
>> >>> 90% of the research above were found by fuzzing, and those are public.
>> >>> Clearly my fuzzers are useful.
>> >>>
>> >>> >You should really learn the protocol you want to fuzz, and develop a
>> >>> >strategy before you create anything else.
>> >>>
>> >>> Although mistakes are inevitable, and seeming how the stuff I write
>> >>> are pretty coherent to the protocol, your statements, once again, are
>> >>> unjustifiable. The strategy is simple: gather points of input, fuzz
>> >>> them, and watch for exceptions. Obviously.
>> >>>
>> >>> >Every fuzzer you've made use the SAME way to ""fuzz"" for differents
>> >>> > app/protocol.
>> >>>
>> >>> Because using a fuzzing oracle is a very good way to identify security
>> >>> bugs. Throwing random data will surely find lots of programming
>> >>> errors, but I want a shell.
>> >>>
>> >>> > The only change i see is your last fuzzer .. written in a different
>> >>> > language, but still the same way ...
>> >>>
>> >>> Yeah, I wrote it in C, and implemented a fuzzing oracle that way. I
>> >>> probably put 100 hours into it, and it gave back some nice return. As
>> >>> like the others.
>> >>>
>> >>> So, "what ever your real name is", I will continue to write fuzzers
>> >>> and exploits. If you comments are meant to bend my attitude or
>> >>> research rather than to troll, you don't have a chance, so get on with
>> >>> your life and I will get on with mine. What a conclusion.
>> >>>
>> >>>
>> >>> On Fri, Mar 6, 2009 at 10:22 AM, Pete Licoln <pete.licoln@...il.com>
>> >>> wrote:
>> >>> > What's hilarious is that none of them are usefull :)
>> >>> > You should really learn the protocol you want to fuzz, and develop a
>> >>> > strategy before you create anything else.
>> >>> > Every fuzzer you've made use the SAME way to ""fuzz"" for differents
>> >>> > app/protocol.
>> >>> >
>> >>> > The only change i see is your last fuzzer .. written in a different
>> >>> > language, but still the same way ...
>> >>> >
>> >>> > 2009/3/5 Jeremy Brown <0xjbrown41@...il.com>
>> >>> >>
>> >>> >> That is hilarious LOL!
>> >>> >>
>> >>> >> On Thu, Mar 5, 2009 at 11:14 PM, Pete Licoln
>> >>> >> <pete.licoln@...il.com>
>> >>> >> wrote:
>> >>> >> > 11 fuzzers matchs for Jeremy Brown on this page LOL !
>> >>> >> >
>> >>> >> > 2009/3/5 Krakow Labs <krakowlabs@...il.com>
>> >>> >> >>
>> >>> >> >> Krakow Labs maintains a current list of security driven fuzzing
>> >>> >> >> technologies.
>> >>> >> >>
>> >>> >> >> http://www.krakowlabs.com/lof.html
>> >>> >> >>
>> >>> >> >> _______________________________________________
>> >>> >> >> Full-Disclosure - We believe in it.
>> >>> >> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >>> >> >> Hosted and sponsored by Secunia - http://secunia.com/
>> >>> >> >
>> >>> >> >
>> >>> >> >
>> >>> >> > _______________________________________________
>> >>> >> > Full-Disclosure - We believe in it.
>> >>> >> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >>> >> > Hosted and sponsored by Secunia - http://secunia.com/
>> >>> >> >
>> >>> >>
>> >>> >> _______________________________________________
>> >>> >> Full-Disclosure - We believe in it.
>> >>> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >>> >> Hosted and sponsored by Secunia - http://secunia.com/
>> >>> >
>> >>> >
>> >>> >
>> >>>
>> >>> _______________________________________________
>> >>> Full-Disclosure - We believe in it.
>> >>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >>> Hosted and sponsored by Secunia - http://secunia.com/
>> >>
>> >>
>> >>
>> >> --
>> >> Rubén Camarero
>> >> CCNA, CISSP
>> >>
>> >> _______________________________________________
>> >> Full-Disclosure - We believe in it.
>> >> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> >> Hosted and sponsored by Secunia - http://secunia.com/
>> >
>> >
>> > _______________________________________________
>> > Full-Disclosure - We believe in it.
>> > Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> > Hosted and sponsored by Secunia - http://secunia.com/
>> >
>>
>> _______________________________________________
>> Full-Disclosure - We believe in it.
>> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
>> Hosted and sponsored by Secunia - http://secunia.com/
>
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Powered by blists - more mailing lists