To shreds, you say?
The author does mention that it's in the experimental stage, but I might make an attempt later just to refresh my AFL knowledge.
The author does mention that it's in the experimental stage, but I might make an attempt later just to refresh my AFL knowledge.
Can AFL test network applications without the need to modify their source code? If not, it should be easy to call the parsing routine in a loop using AFL's persistent mode.
At this time xHTTP only parses the minimum amount of headers to work, so fuzzing might not find much yet