rediscovery of heartbleed

rediscovery of heartbleed

http://37.35.2.189:8080/home

https://blog.hboeck.de/archives/868-How-Heartbleed-couldve-been-found.html
http://cybersecpolitics.blogspot.fr/2016/05/the-common-thread-fuzzing-bug-triage.html

#Build up boost
sudo apt-get install libboost-all-dev
#download libtorrent source
wget https://github.com/arvidn/libtorrent/releases/download/libtorrent-1_1/libtorrent-rasterbar-1.1.0.tar.gz
#unrar
tar xvzf <filename>
cd <foldername>
AFL_USE_ASAN=1 AFL_HARDEN=1 ./configure CC="afl-gcc" CXX="afl-g++" --disable-shared --prefix=/opt/libtorrent
make
make install

#vim /etc/site-config.jam
using gcc :   : /usr/local/bin/afl-g++ ;

sudo su
sudo echo core >/proc/sys/kernel/core_pattern
cd /sys/devices/system/cpu
echo performance | tee cpu*/cpufreq/scaling_governor
afl-fuzz -i in -o out ../libtorrent-rasterbar-1.1.0/examples/bin/gcc-4.8/debug/link-static/threading-multi/simple_client @@