IoctlFuzz, facilitates setting kernel-level-fuzzing-environment and fuzzing IOCTL in drivers. IoctlFuzz works exactly like this.
- Windows SDK
- Python 3
- VMware and target OS
- VirtualKD
- WinDbg extension: !exploitable, pykd
- Python 3
- VirtualKD
- z3
pip install pykd pypiwin32 winshell
cd on_host/src
python setup.py
as admin.python start_fuzzing.py
as admin.
pip install pypiwin32 winshell
cd on_target/src
python setup.py
# | host OS | target OS |
---|---|---|
0 | Windows 10 x64 | Windows 7 x64 |
- coverage-guided fuzzing
- SQLite-based corpus management
- pipe between host and target
- automated ioctl dict parsing
- distributed system
- web interface