Welcome to fuddly’s documentation!

Contents:

• 1. Overview
• 2. Tutorial
  • 2.1. Installing fuddly with pipenv
  • 2.2. Fuddly CLI
  • 2.3. Using fuddly simple UI: Fuddly Shell
    • 2.3.1. Start a Fuddly Session
    • 2.3.2. Send Malformed ZIP Files to the Target (Manually)
      • 2.3.2.1. How to Send a ZIP File
      • 2.3.2.2. How to Perform Automatic Modification on Data
      • 2.3.2.3. Resetting & Cloning Operators
      • 2.3.2.4. Reloading Data Models / Targets / …
    • 2.3.3. Use a Director to Send Malformed Data
    • 2.3.4. Replay Data From a Previous Session
  • 2.4. Using fuddly Through Advanced Python Interpreter
  • 2.5. Implementing a Data Model and Defining a Project Environment
    • 2.5.1. Foreword
    • 2.5.2. Data Modeling
      • 2.5.2.1. Overview
      • 2.5.2.2. A First Example
      • 2.5.2.3. Defining the Imaginary MyDF Data Model
    • 2.5.3. Visualization of Modeled Data
    • 2.5.4. Absorption of Raw Data that Complies to the Data Model
      • 2.5.4.1. A First Example
      • 2.5.4.2. Absorption Constraints
      • 2.5.4.3. Defining Absorption Helpers
    • 2.5.5. Describing Protocols Ruling a Data Model
    • 2.5.6. Defining Specific Operators
      • 2.5.6.1. Overview
      • 2.5.6.2. The Model Walker Infrastructure
    • 2.5.7. Defining a Project Environment
      • 2.5.7.1. Defining the Targets
      • 2.5.7.2. Defining the Logger
      • 2.5.7.3. Defining Directors
      • 2.5.7.4. Defining Probes
      • 2.5.7.5. Defining Tasks
• 3. Data Modeling
  • 3.1. Data Model Keywords
    • 3.1.1. Generic Description Keywords
    • 3.1.2. Keywords to Describe Non Terminal Node
    • 3.1.3. Keywords to Describe Generator Node
    • 3.1.4. Keywords to Import External Data Description
    • 3.1.5. Keywords to Describe Node Properties
    • 3.1.6. Keywords to Describe Constraints
  • 3.2. Value Types
    • 3.2.1. Integer
    • 3.2.2. String
    • 3.2.3. BitField
  • 3.3. Helpers
    • 3.3.1. Generator Node Templates
    • 3.3.2. Block Builders
  • 3.4. Data Model Patterns
    • 3.4.1. How to Describe Different Shapes for Some Parts of Data
    • 3.4.2. How to Describe the Separators of a Data Format
    • 3.4.3. How to Describe a Data Format Whose Parts Change Depending on Some Fields
    • 3.4.4. How to Generate Nodes Dynamically (for length, counter, …)
    • 3.4.5. How to Describe a Data Format With Some Encoded Parts
    • 3.4.6. How to Describe a Data Format That Contains Complex Strings
    • 3.4.7. How to Describe Constraints of Data Formats
• 4. Data Manipulation
  • 4.1. Overview
    • 4.1.1. Generate Data a.k.a. Freeze a Graph
    • 4.1.2. Create Nodes with Low-Level Primitives
    • 4.1.3. Cloning a Node
    • 4.1.4. Display a Frozen Graph
    • 4.1.5. The Node Environment
  • 4.2. Search for Nodes in a Graph
  • 4.3. The Node Dictionary Interface
  • 4.4. Change a Node
    • 4.4.1. Operations on Node Properties and Attributes
    • 4.4.2. Node Configurations
    • 4.4.3. Node Corruption Infrastructure
    • 4.4.4. Byte String Absorption
  • 4.5. Miscellaneous Primitives
  • 4.6. Entangled Nodes
• 5. Data Analysis
  • 5.1. FmkDB Toolkit
    • 5.1.1. Usage Examples
    • 5.1.2. Fmkdb Toolkit Manual
  • 5.2. Plotty
    • 5.2.1. Usage Examples
    • 5.2.2. Plotty Manual
    • 5.2.3. Concrete output example
• 6. Scenario Infrastructure
  • 6.1. Overview
  • 6.2. Scenario Description
    • 6.2.1. A First Example
    • 6.2.2. Steps
    • 6.2.3. Transitions
    • 6.2.4. Data Generation Process
    • 6.2.5. Scenario Involving Multiple Targets
  • 6.3. Scenario Fuzzing
    • 6.3.1. Overview
    • 6.3.2. Fuzzing by Example
      • 6.3.2.1. Invert Transition Conditions
      • 6.3.2.2. Ignore Timing Constraints
      • 6.3.2.3. Fuzz the Data Sent by the Scenario
      • 6.3.2.4. Make the protocol stutter
• 7. Knowledge Infrastructure
  • 7.1. Get Knowledge about the Targets Under Test
    • 7.1.1. Defining a Feedback Handler to Create Knowledge from Targets’ and Probes’ Feedback
    • 7.1.2. Adding Knowledge About the Targets Under Test in the Project File
    • 7.1.3. Information Categories and How to Define More
  • 7.2. Leveraging the Knowledge
    • 7.2.1. Automatic Fuddly Adaptation to Knowledge
    • 7.2.2. Leveraging Knowledge in User-defined Components
• 8. Evolutionary Fuzzing
  • 8.1. Overview
  • 8.2. User interface
  • 8.3. Crossover Algorithms
    • 8.3.1. Algo1 - Randomly swap some root nodes’ children
    • 8.3.2. Algo2 - Randomly swap some leaf nodes
• 9. Generic Data Makers
  • 9.1. Generic Generators
    • 9.1.1. GENP - Pattern Generation
    • 9.1.2. POPULATION - Generator for Evolutionary Fuzzing
  • 9.2. Generic Operators
    • 9.2.1. Stateful Operators
      • 9.2.1.1. tTYPE - Advanced Alteration of Terminal Typed Node
      • 9.2.1.2. tSTRUCT - Alter Data Structure
      • 9.2.1.3. tALT - Walk Through Alternative Node Configurations
      • 9.2.1.4. tCONST - Alteration of Constraints
      • 9.2.1.5. tSEP - Alteration of Separator Node
      • 9.2.1.6. tWALK - Walk Through a Data Model
      • 9.2.1.7. tWALKcsp - Walk Through the Constraint of a Data Model
    • 9.2.2. Stateless Operators
      • 9.2.2.1. ADD - Add Data Within a Node
      • 9.2.2.2. OP - Perform Operations on Nodes
      • 9.2.2.3. MOD - Modify Node Contents
      • 9.2.2.4. CALL - Call Function
      • 9.2.2.5. NEXT - Next Node Content
      • 9.2.2.6. FIX - Fix Data Constraints
      • 9.2.2.7. ALT - Alternative Node Configuration
      • 9.2.2.8. C - Node Corruption
      • 9.2.2.9. Cp - Corruption at Specific Position
      • 9.2.2.10. EXT - Make Use of an External Program
      • 9.2.2.11. SIZE - Truncate
      • 9.2.2.12. STRUCT - Shake Up Data Structure
      • 9.2.2.13. COPY - Shallow Copy Data
• 10. Generic Targets
  • 10.1. NetworkTarget
  • 10.2. LocalTarget
  • 10.3. SSHTarget
  • 10.4. PrinterTarget
  • 10.5. SIMTarget
  • 10.6. TestTarget
• 11. Generic Probes and Backend
  • 11.1. Generic Backend
    • 11.1.1. SSH_Backend
    • 11.1.2. Serial_Backend
    • 11.1.3. Shell_Backend
  • 11.2. Generic Probes
    • 11.2.1. ProbePID
    • 11.2.2. ProbeMem
    • 11.2.3. ProbeCmd
• 12. Useful Examples
  • 12.1. ZIP archive modification
• 13. Packaging
  • 13.1. Third party module
    • 13.1.1. Samples
    • 13.1.2. Load order
  • 13.2. Fuddly
• 14. Fuddly API
  • 14.1. API Index
  • 14.2. framework package
    • 14.2.1. framework.basic_primitives module
      • calc_parity_bit()
      • corrupt_bits()
      • corrupt_bytes()
      • rand_string()
    • 14.2.2. framework.data module
    • 14.2.3. framework.data_model module
    • 14.2.4. framework.node module
    • 14.2.5. framework.node_builder module
    • 14.2.6. framework.value_types module
      • BitField
      • Filename
      • FolderPath
      • GSM7bitPacking
      • GSMPhoneNum
      • GZIP
      • INT
      • INT16
      • INT32
      • INT64
      • INT8
      • INT_str
      • SINT16_be
      • SINT16_le
      • SINT32_be
      • SINT32_le
      • SINT64_be
      • SINT64_le
      • SINT8
      • String
      • UINT16_be
      • UINT16_le
      • UINT32_be
      • UINT32_le
      • UINT64_be
      • UINT64_le
      • UINT8
      • VT
      • VT_Alt
      • Wrapper
      • from_encoder()
    • 14.2.7. framework.generic_data_makers module
    • 14.2.8. framework.target_helpers module
    • 14.2.9. framework.targets.network module
    • 14.2.10. framework.targets.local module
    • 14.2.11. framework.targets.sim module
    • 14.2.12. framework.targets.ssh module
    • 14.2.13. framework.targets.printer module
    • 14.2.14. framework.targets.debug module
    • 14.2.15. framework.project module
    • 14.2.16. framework.director_helpers module
    • 14.2.17. framework.logger module
    • 14.2.18. framework.monitor module
      • AddExistingProbeToMonitorError
      • BlockingProbeUser
      • Monitor
      • Probe
      • ProbeCmd
      • ProbeMem
      • ProbePID
      • ProbeStatus
      • ProbeTimeoutError
      • ProbeUser
      • blocking_probe()
      • probe()
    • 14.2.19. framework.comm_backends module
      • Backend
      • BackendError
      • SSH_Backend
      • Serial_Backend
      • Shell_Backend
    • 14.2.20. framework.tactics_helpers module
    • 14.2.21. framework.fuzzing_primitives module
    • 14.2.22. framework.encoders module
      • BitInverter_Enc
      • BitReverse_Enc
      • Encoder
      • EncoderAbsorptionHelper
      • EncoderSizeNotFoundError
      • EncoderUnrecognizedValueError
      • GSM7bitPacking_Enc
      • GSMPhoneNum_Enc
      • GZIP_Enc
      • Wrap_Enc
    • 14.2.23. framework.database module
      • Database
      • FeedbackGate
      • regexp()
      • regexp_bin()
      • register_adapters_and_converters()
    • 14.2.24. framework.scenario module
    • 14.2.25. framework.dmhelpers.generic module
    • 14.2.26. framework.dmhelpers.xml module
    • 14.2.27. framework.evolutionary_helpers module
    • 14.2.28. framework.info.generic module
      • Hardware
      • InputHandling
      • Language
      • OS
      • OperationMode
      • Test
    • 14.2.29. framework.knowledge.feedback_collector module
      • FeedbackCollector
      • FeedbackSource
    • 14.2.30. framework.knowledge.feedback_handler module
      • FeedbackHandler
      • SimilarityMeasure
      • TestFbkHandler
    • 14.2.31. framework.knowledge.information module
      • Info
      • InformationCollector
      • TrustLevel
    • 14.2.32. framework.constraint_helpers module
    • 14.2.33. framework.plumbing module
    • 14.2.34. libs.utils module
      • Accumulator
      • ExternalDisplay
      • Task
      • Term
      • chunk_lines()
      • find_file()
      • get_caller_object()
      • retrieve_app_handler()

Indices and tables

• Index

• Module Index

• Search Page