hw5 progress
45
hw5/hw5.md
@ -1,7 +1,48 @@
|
|||||||
# Homework 5: Fuzzing
|
# Homework 5: Fuzzing
|
||||||
|
|
||||||
|
|
||||||
|
## Prelude
|
||||||
|
The first step I took for this asignment was setting up the docker container. This was straightforward with the provided instructions
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
## Step-0
|
||||||
|
|
||||||
|
Here, I have followed the instructions the run the sample RTSP client and server
|
||||||
|
|
||||||
|
The server running is shown here
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
In another terminal, we run the sample client
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
## Step-1. Prepare message sequences as seed inputs
|
## Step-1. Prepare message sequences as seed inputs
|
||||||
|
|
||||||
First, I start the test server
|
At this point, we have the server and client running. The next step is to install TCP dump, and open it up on a 3rd terminal window. We can now restart the client and capture some traffic
|
||||||

|
|
||||||
|
As we can see, with this approach we have captured 24 packets
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
Using `docker cp` I have copied that file `rtsp.pcap` to my local machine, and also have included it at [./rtsp.pcap](./rtsp.pcap)
|
||||||
|
|
||||||
|
Lets take a look at this file with `wireshark rtsp.pcap`
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|
Following the instruction, we can save the raw TCP stream of the request messages to [rtsp_requests_wav.raw](./step1/rtsp_requests_wav.raw)
|
||||||
|
|
||||||
|
## Step-3 Fuzzing
|
||||||
|
|
||||||
|
We begin the fuzzing process running the supplied command
|
||||||
|
```
|
||||||
|
afl-fuzz -d -i $AFLNET/tutorials/live555/in-rtsp -o out-live555 -N tcp://127.0.0.1/8554 -x $AFLNET/tutorials/live555/rtsp.dict -P RTSP -D 10000 -q 3 -s 3 -E -K -R ./testOnDemandRTSPServer 8554
|
||||||
|
```
|
||||||
|
|
||||||
|
It seems off to a good start, and I will let this run for some time and check back later. In this case, I will use the provided seed corpus.
|
||||||
|
|
||||||
|

|
||||||
|
|
||||||
|

|
BIN
hw5/rtsp.pcap
BIN
hw5/step0/client.png
Normal file
After Width: | Height: | Size: 130 KiB |
BIN
hw5/step0/docker.png
Normal file
After Width: | Height: | Size: 134 KiB |
BIN
hw5/step0/server.png
Normal file
After Width: | Height: | Size: 41 KiB |
BIN
hw5/step1/capture.png
Normal file
After Width: | Height: | Size: 312 KiB |
10
hw5/step1/rtsp_requests_wav.raw
Normal file
@ -0,0 +1,10 @@
|
|||||||
|
DESCRIBE rtsp://127.0.0.1:8554/wavAudioTest RTSP/1.0
|
||||||
|
CSeq: 2
|
||||||
|
User-Agent: ./testRTSPClient (LIVE555 Streaming Media v2018.08.28)
|
||||||
|
Accept: application/sdp
|
||||||
|
|
||||||
|
SETUP rtsp://127.0.0.1:8554/wavAudioTest/track1 RTSP/1.0
|
||||||
|
CSeq: 3
|
||||||
|
User-Agent: ./testRTSPClient (LIVE555 Streaming Media v2018.08.28)
|
||||||
|
Transport: RTP/AVP;unicast;client_port=34668-34669
|
||||||
|
|
Before Width: | Height: | Size: 44 KiB |
BIN
hw5/step1/tcp-raw.png
Normal file
After Width: | Height: | Size: 86 KiB |
BIN
hw5/step1/wireshark.png
Normal file
After Width: | Height: | Size: 182 KiB |
BIN
hw5/step3/afl.png
Normal file
After Width: | Height: | Size: 170 KiB |
BIN
hw5/step3/begin-fuzz.png
Normal file
After Width: | Height: | Size: 178 KiB |