ELF 4 I 4 ( $ ! 4 44 4 44 O O O O H HHD D Qtd Rtd O O /lib/ld-linux.so.2 GNU GNU 7 ;yj%(T<
$ K . h G ` v : } o 4 A O / ) \ __gmon_start__ libc.so.6 _IO_stdin_used exit srand fopen perror ftell strncpy __stack_chk_fail putchar rewind strlen memset fseek getopt fputs fclose optarg strncat fread gettimeofday atoi strcmp __libc_start_main snprintf GLIBC_2.4 GLIBC_2.1 GLIBC_2.0 ii
ii
ii
O P P P P P P P P P $P
(P ,P 0P
4P 8P Q Ld X[5O%O % Ph %Ph %Ph % Ph %Ph %Ph( %Ph0 % Ph8 p% Ph@ `%$PhH P%(PhP @%,PhX 0%0Ph` %4Phh %8Php %
U`>D$ D$A $ U D$t@ D$A $@U@D$ D$A $\%U\%D$ D$A $@=xU@=D$ D$A $
RU
D$ D$A $,UD$ D$A $`: U`: D$ D$A $NUNUWVS E4E 0E,e E10\0X0T0PDžL DžH d HŠU$@@ A<Ⱥ Àփ؉ǃ ׃$ $Ⱥ ǃ׃ ǃ׃ȃ)čD$8LD}$uDHŠUE D$@D$T$ ,D$PD$4$ } u6}$ u0HŠUE D$ @D$T$4$/ } u@}$ u:HŠUE D$@D$ T$XD$4$6 } }$ }uDZ`}uD [`}uD@[`}uD[`}uD[`}uD \`}uD@\`}uD\`} uD\`}
uD ]`} uD`]`} uD]`}
uD ^`}uD`^`}uD^`}uD^`}uD _`}uD`_`}uD_`}uD_`}uD ``}uD```}uD``}uD``}uD a`}uD`a`}uDa`} uDa`} uD b`} uDb`} uDb`} uD c`}!uD`c`}"uDc`}#uD d`}$uD@d`}%uDd`}&uDd`}'uD e`}(uD@e`})uDe`}*uDe`}+uD f`},uD@f`}-uDf`}.uDf`}/uD g`}0uDg`HŠUE D$@D$T$ `D$0D$4$X: } u@}$ u:HŠUE D$@D$ T$\D$4$? } u@}$ u:HŠUE D$@D$ T$`D$4$H HH^LL;EjEe3 te [^_]UWVS EdE `E \e E1E E E E E E E 4E E E E E E E E E E E E E E D$ t$tx1Љ$^?]AL
0 0)ljEEk^)ЉE} ~?P]AL
0 0)ljEEk^)ЉE} ~? ]AL
0 0)ljEEk^)ЉE} ~?]AL
0 0)ljEEk^)ЉE} ~?{]AL
0 0)ljEEk^)ЉE} ~?4]AL
0 0)ljEEk^)ЉE} ~?]AL
0 0)ljEEk^)ЉE} ~?]AL
0 0)ljEEk^)ЉE} ~?_]AL
0 0)ljEEk^)ЉE} ~?]AL
0 0)ljEEk^)ЉE} ~@gfff0 0)Љ)ljE} ~ }ЃE} ~} u80f$I
))Љ)BE} ~ʃ} } @gfff0 0)Љ)ljE}~H$I
0 0)ljEE )Љ)ЉE} ~EjEԃ} k }a @agfff0 0)Љ)ljE} ~}uWB*0 0)Љ )ljE} ~EjEԃ}uXCDž0*0鉕0 0)lj)ЃE} ~EjEԃ}uXCXDž0*0鉕0 0)lj)ЃE} ~EjEԃ} CDž0*0鉕0 0)lj)ЃE} ~B*0 0)ЉEU)ljE} ~E kEEEEkE} } :-gfff0 0)Љ)ЃE}~CDž0VUUU0鉕0 0)ljEUЉ)ЉE} ~EzE} } :gfff0 0)Љ)ЃE} ~>=>0 0)Ѝ )ЃE} ~EyE}
)ȃE} ~ۃ}uZEDž0*0鉕0 0)ljEU)ЉE} ~EzEЋMAEȺ Àփ؉ǃP׃TPTȺ ǃH׃LHLǃ@׃D@Dȃ)čD$|ȋ|D$D$ $}u;E *E i|D$ T$$#EE;E|}uiE PE i|D$ T$$E i|D$ T$$EE };E} E vE i|D$ T$$oE i|D$ T$$IE i|D$ T$$#EE };Ev} E E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$]EE };EP} E E i|D$ T$$ E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$qEE };E*} E E i|D$ T$$ E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$_EE };E}. E E i|D$ T$$ E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$sE i|D$ T$$ME i|D$ T$$'EE };E}T E 4 E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$aE i|D$ T$$;E i|D$ T$$E i|D$ T$$E i|D$ T$$EE };E} z E Z E i|D$ T$$uE i|D$ T$$OE i|D$ T$$)E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$kE i|D$ T$$EEE };E}
E E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$E i|D$ T$$YE i|D$ T$$3E i|D$ T$$
E i|D$ T$$E i|D$ T$$E i|D$ T$$EE };El} t }Uă}$u:|E D$ED$T$ \D$`D$d$ } u,}$ u&|ED$ ED$T$d$} } u3}$ u-|ED$ED$ T$EԉD$d$j } }$ }u
EċlE܃}u
EċlE܃}u
Eċ mE܃}u
Eċ`mE܃}u
EċmE܃}u
EċmE܃}u
Eċ nE܃}u
EċnE܃} u
EċnE܃}
u
Eċ oE܃} u
Eċ@oE܃} u
EċoE܃}
u
EċoE܃}u
Eċ@pE܃}u
EċpE܃}u
EċpE܃}u
Eċ qE܃}u
Eċ@qE܃}u
EċqE܃}u
EċqE܃}u
Eċ rE܃}u
Eċ@rE܃}u
EċrE܃}u
EċrE܃}u
Eċ sE܃}u
Eċ@sE܃}u
EċsE܃} u
EċsE܃} u
Eċ tE܃} u
Eċ`tE܃} u
EċtE܃} u
Eċ uE܃}!u
Eċ@uE܃}"u
EċuE܃}#u
EċuE܃}$u
Eċ vE܃}%u
Eċ`vE܃}&u
EċvE܃}'u
EċvE܃}(u
Eċ wE܃})u
Eċ`wE܃}*u
EċwE܃}+u
EċwE܃},u
Eċ xE܃}-u
Eċ`xE܃}.u
EċxE܃}/u
Eċ yE܃}0u
Eċ`yE܋|ED$ED$T$ E܉D$ED$d$ } u3}$ u-|ED$ED$ T$E؉D$d$|& } u3}$ u-|ED$ED$ T$EЉD$d$. 4EE;E^Ee3 tae [^_]ÐUWVS EE E Ee E1Dž` Dž\ DžX DžT DžP } u
Dž`
} u
Dž`
} u
Dž`
} u
Dž`
} u
Dž`
t~
T$$ LL u$
$D$ D$ L$L$PL$PHAHȺ Àփ؉ÀӃȺ ÀӃÀӃȃ)čD$<D tTȋDD$D$ $NPDLD$ T$D$ $$L$f
T$$LL u$
$D$ D$ L$L$/XD$0[/D$,c/T$(`D$$D$ j/D$ z/DD$`D$D$/D$ /|$\$ $ݥXdT$$XT$D$ $虤D$ D$ d${8/`L$T$`T$TT$ D$D$ d$D}u7/XD$/L\$D$ /L$T$$}u7/XD$/L\$D$ /L$T$$ʤ}u7/XD$/L\$D$ 0L$T$$荤}uY30XD$$D0L\$ D$ F0D$D0L\$D$I0D$ K0L$T$$.}uic0XD$,y0D$(D0L\$$D$ F0D$ D0L\$D$I0D$0D$ K0L$T$$迣}uW0XD$$y0D$ 0D$ 0L\$D$0D$0D$ K0L$T$$b}uW0XD$$y0D$ 0D$ 0L\$D$0D$0D$ K0L$T$$}uO0XD$ y0D$ 0L\$D$0D$0D$ K0L$T$$谢} 1XD$8y0D$40D$0D0L\$,D$(F0D$$D0L\$ D$ I0D$D0D$0D$0D$ K0L$T$$%}
uo%1XD$0y0D$,0D$(A1D$$0L\$ D$ J1D$D0D$0D$0D$ K0L$T$$谡} uoQ1XD$0y0D$,0D$(A1D$$0L\$ D$ k1D$D0D$0D$0D$ K0L$T$$;} ug{1XD$,y0D$(0D$$A1L\$ D$ 1D$D0D$0D$0D$ K0L$T$$Π}
1XD$ bf3
Browser Fuzzer 3
jbrown@KL
USAGE: %s <-M #> <-A/-U> <-O/-R #> [-Z #]
[-X file.ext] [-x extra.html] [-P /www]
INFO: [-T Fuzzing Oracle] [-D Modules Available]
[Modules Available]
(1) Cascading Style Sheets (CSS) (2) Document Object Model (DOM) (3) HyperText Markup Language (HTML) (4) JavaScript (JS) (5) Extensible Markup Language (XML)
M:AUOR:Z:X:x:P:TD jTwϊ
Krakow Labs Development -> bf3
Browser Fuzzer 3
jbrown@KL
Krakow Labs Development -> bf3
Browser Fuzzer 3
jbrown@KL
[Fuzzing Oracle]
[%d] %s
Overflow: A x 550 Overflow: A x 1100 Overflow: A x 2100 Overflow: A x 4200 Overflow: A x 8400 Overflow: A x 16500 Overflow: A x 33000 Overflow: A x 65800 Overflow: A x 131200 Overflow: A x 262400 Overflow: A x 525000 Overflow: A x 1050000 Format String: %n x 5 Format String: %p x 5 Format String: %s x 5 Format String: %d x 5 Format String: %x x 5 Format String: %s%p%x%d Format String: %s x 30 Format String: %.1024d Format String: %.1025d Format String: %.2048d Format String: %.2049d Format String: %.4096d Format String: %.4097d Format String: %99999999999s Format String: %0%1%2%3%4%5%6%7%8%9%10%11%12%13%14%15%16%17%18%19%20 Format String: %%20n Format String: %%20p Format String: %%20s Format String: %%20d Format String: %%20x Format String: %#0123456x%08x%x%s%p%d%n%o%u%c%h%l%q%j%z%Z%t%i%e%g%f%a%C%S%08x%% Number: 0 Number: -0 Number: 1 Number: -1 Number: 32767 Number: -32768 Number: 65535 Number: 65536 Number: 65537 Number: 16777215 Number: 16777216 Number: 16777217 Number: 2147483647 Number: -2147483647 Number: 2147483648 Number: -2147483648 Number: 4294967294 Number: 4294967295 Number: 4294967296 Number: 357913942 Number: -357913942 Number: 536870912 Number: -536870912 Number: 5e-324 Number: 1.79769313486231E+308 Number: 3.39519326559384E-313 Number: 0xff Number: 0x3fffffff Number: 0xffffffff Number: 0xfffffffe Number: 0x7fffffff Number: 0x7ffffffe Number: 0x100 Number: 0x1000 Number: 0x10000 Number: 0x100000 Number: 0x80000000 Number: -268435455 Number: 0x99999999 Number: 99999999999 Number: -99999999999 Misc Bug: test|touch /tmp/FU_ZZ_ED|test Misc Bug: test`touch /tmp/FU_ZZ_ED`test Misc Bug: test'touch /tmp/FU_ZZ_ED'test Misc Bug: test;touch /tmp/FU_ZZ_ED;test Misc Bug: test&&touch /tmp/FU_ZZ_ED&&test Misc Bug: test|C:/WINDOWS/system32/calc.exe|test Misc Bug: test`C:/WINDOWS/system32/calc.exe`test Misc Bug: test'C:/WINDOWS/system32/calc.exe'test Misc Bug: test;C:/WINDOWS/system32/calc.exe;test Misc Bug: C:/WINDOWS/system32/calc.exe Misc Bug: |/bin/sh| Misc Bug: `/bin/sh` Misc Bug: %0xa Misc Bug: %u000 Misc Bug: `~!@#$ Misc Bug: %^&*() Misc Bug: -=_+ Misc Bug: []{} Misc Bug: |;\': Misc Bug: ,./<>? document.getElementById document.getElementsByName document.getElementsByTagName document.open document.write document.writeIn window.outerHeight window.outerWidth window.status window.resizeBy window.resizeTo window.moveBy window.moveTo window.scrollBy window.scrollTo window.setInterval window.setTimeout document.cookie screen.bufferDepth screen.updateInterval window.defaultStatus location.hash location.replace history.go location.assign location.hostname location.href location.pathname location.protocol location.search location.port window.alert window.confirm window.open window.prompt body p hr font bdo pre a link frame frameset iframe form input textarea button select optgroup option label legend ul ol li dir menu img map area table caption th tr td thead tbody tfoot col colgroup style div head meta base basefont script applet object param alink background bgcolor text vlink class id title lang accesskey tabindex align noshade size width color face charset coords href hreflang name rel rev shape target type hrefland media frameborder longdesc marginheight marginwidth noresize scrolling src cols rows height action accept accept-charset enctype method alt checked disabled maxlength readonly value multiple selected for compact start border hspace usemap vspace nohref cellpadding cellspacing rules summary abbr axis char charoff colspan headers nowrap rowspan scope valign span profile content http-equiv scheme defer language archive code codebase classid codetype data declare standby valuetype decodeURI decodeURIComponent encodeURI encodeURIcomponent escape unescape eval isFinite isNaN Number parseFloat parseInt String s.anchor s.charAt s.concat s.fontcolor s.fontsize s.fromCharCode s.indexOf s.lastIndexOf s.link s.match s.replace s.search s.slice s.split s.substr s.substring d.parse d.setDate d.setFullYear d.setHours d.setMilliseconds d.setMinutes d.setMonth d.Seconds d.setTime d.setUTCDate d.setUTCMonth d.setUTCFullYear d.setUTCHours d.setUTCMinutes d.setURCSeconds d.setUTCMilliseconds d.setYear Math.abs Math.acos Math.asin Math.atan Math.atan2 Math.ceil Math.cos Math.exp Math.floor Math.log Math.max Math.min Math.pow Math.round Math.sin Math.sqrt Math.tan n.toExponential n.toPercision n.toString alert confirm prompt alternate a b c d e f g h i j k l m n o p q r s t u v w x y z A B C D E F G H I J K L M N O P Q R S T U V W X Y Z 0 1 2 3 4 5 6 7 8 9 ` ~ ! @ # $ % ^ & * ( ) - = _ + [ ] \ { } | ; ' : " , . / < > ? document.getElementById document.getElementsByName document.getElementsByTagName document.open document.write document.writeIn window.outerHeight window.outerWidth window.status window.resizeBy window.resizeTo window.moveBy window.moveTo window.scrollBy window.scrollTo window.setInterval window.setTimeout document.cookie screen.bufferDepth screen.updateInterval window.defaultStatus location.hash location.replace history.go location.assign location.hostname location.href location.pathname location.protocol location.search location.port window.alert window.confirm window.open window.prompt body hr font bdo pre link frame frameset iframe form input textarea button select optgroup option label legend ul ol li dir menu img map area table caption th tr td thead tbody tfoot col colgroup style div head meta base basefont script applet object param alink background bgcolor text vlink class id title lang accesskey tabindex align noshade size width color face charset coords href hreflang name rel rev shape target type hrefland media frameborder longdesc marginheight marginwidth noresize scrolling src cols rows height action accept accept-charset enctype method alt checked disabled maxlength readonly value multiple selected for compact start border hspace usemap vspace nohref cellpadding cellspacing rules summary abbr axis char charoff colspan headers nowrap rowspan scope valign span profile content http-equiv scheme defer language archive code codebase classid codetype data declare standby valuetype decodeURI decodeURIComponent encodeURI encodeURIcomponent escape unescape eval isFinite isNaN Number parseFloat parseInt String s.anchor s.charAt s.concat s.fontcolor s.fontsize s.fromCharCode s.indexOf s.lastIndexOf s.link s.match s.replace s.search s.slice s.split s.substr s.substring d.parse d.setDate d.setFullYear d.setHours d.setMilliseconds d.setMinutes d.setMonth d.Seconds d.setTime d.setUTCDate d.setUTCMonth d.setUTCFullYear d.setUTCHours d.setUTCMinutes d.setURCSeconds d.setUTCMilliseconds d.setYear Math.abs Math.acos Math.asin Math.atan Math.atan2 Math.ceil Math.cos Math.exp Math.floor Math.log Math.max Math.min Math.pow Math.round Math.sin Math.sqrt Math.tan n.toExponential n.toPercision n.toString alert confirm prompt alternate body p hr font bdo pre a link frame frameset iframe form input textarea button select optgroup option label legend ul ol li dir menu img map area table caption th tr td thead tbody tfoot col colgroup style div head meta base basefont script applet object param alink background bgcolor text vlink class id title lang accesskey tabindex align noshade size width color face charset coords href hreflang name rel rev shape target type hrefland media frameborder longdesc marginheight marginwidth noresize scrolling src cols rows height action accept accept-charset enctype method alt checked disabled maxlength readonly value multiple selected for compact start border hspace usemap vspace nohref cellpadding cellspacing rules summary abbr axis char charoff colspan headers nowrap rowspan scope valign span profile content http-equiv scheme defer language archive code codebase classid codetype data declare standby valuetype alternate css dom html js xml r fopen %s/%s%d.html %s
%s%s%d.html%s
%s%s%d%s
%s