diff options
author | Jack Lloyd <[email protected]> | 2017-09-01 13:49:12 -0400 |
---|---|---|
committer | Jack Lloyd <[email protected]> | 2017-09-02 05:18:11 -0400 |
commit | de8d2f6988bf056ce667a8cd6f988b32ec702b9d (patch) | |
tree | 478a6542e364e7d599ca5a7f2e4d7cdbb9a758c4 | |
parent | 6693454c7cfd40b733520b90f9fbb5737faab069 (diff) |
Document how to use TLS-Attacker
-rw-r--r-- | doc/manual/fuzzing.rst | 18 |
1 files changed, 18 insertions, 0 deletions
diff --git a/doc/manual/fuzzing.rst b/doc/manual/fuzzing.rst index b87c6e5e7..43b125f6b 100644 --- a/doc/manual/fuzzing.rst +++ b/doc/manual/fuzzing.rst @@ -46,6 +46,24 @@ run under `afl-fuzz`:: $ afl-fuzz -i corpus_path -o output_path ./build/fuzzer/binary +Fuzzing with TLS-Attacker +-------------------------- + +TLS-Attacker (https://github.com/RUB-NDS/TLS-Attacker) includes a mode for fuzzing +TLS servers. A prebuilt copy of TLS-Attacker is available in a git repo:: + + $ git clone --depth 1 https://github.com/randombit/botan-ci-tools.git + +To run it against Botan's server:: + + $ ./configure.py --with-sanitizers + $ make botan + $ ./src/scripts/run_tls_fuzzer.py ./botan ./botan-ci-tools + +Output and logs from the fuzzer are placed into `/tmp`. See the +TLS-Attacker documentation for more information about how to use this +tool. + Input Corpus ----------------------- |