A method, device and device for verifying traffic based on fuzzing test

Abstract

The present invention relates to a method for verifying traffic based on fuzzing test, comprising: writing a plug-in of the debugger according to a debugger corresponding to the type of the target product; after attaching the debugger to the process of the target product, loading the debugger The plug-in of the debugger, the plug-in modifies the data at the breakpoint of the target product according to a preset random modification algorithm, executes the modified data through the process, and obtains the problem of the target product according to the execution result . The invention realizes that a large batch of tests can be carried out without decryption in the test process. And without knowing the specific encryption and decryption algorithm, the fuzz test can be performed on the traffic with or without encryption and decryption, and good test results are obtained, and some 0day vulnerabilities are even found. The invention also relates to a device, a storage medium and a device based on the fuzzing test to verify the flow.

Description

technical field [0001] The present invention relates to the field of computer technology, and in particular, to a method, device and device for verifying traffic based on fuzzing testing. Background technique [0002] In today's computer software field, in the product testing phase, testers need to write many test cases, invest a lot of time in manual testing, and record test results. This approach is inefficient and difficult to achieve good results. Occasionally, there may be missed tests, and in severe cases, even online accidents may occur. [0003] Fuzzing is one of the most popular vulnerability discovery tools used by security researchers. Fuzzing can provide various possible inputs, observe whether the output results are normal, and automatically run for many days at a time, and finally analyze the output results, so as to achieve better results than manual testing. For a target product, if the input and output are encrypted traffic and dynamic keys are used, exis...

AI Technical Summary

Problems solved by technology

For a target product, if the input and output are encrypted traffic and dynamic keys are used, existing fuzzing tools cannot test encrypted traffic

At present, none of the existing fuzzers tools can fuzz the traffic that needs to be encrypted and decrypted. If code intervention is used, the method of directly removing the encryption and decryption process for testing does not meet the test requirements.

Images