bermise_fuzz.sh

# bermise_fuzz
# oxagast

mupr="64";

syslog_crashes=$(grep "traps:\|segfault" /var/log/syslog -c);
binname="$1";
binshort=$(echo $binname | awk -F "/" '{print $NF}')
echo fuzzing $binname;
randchars=1;
while [ $randchars -le 1 ]
do
kill_timer=`sleep 0.5; killall $binshort 2>/dev/null`;
fuzz=`dd if=/dev/urandom bs=1 count=$mupr 2>/dev/null`;
echo $fuzz > $binshort.tmp;
echo $fuzz | $@; echo $?;
mv $binshort.tmp $binshort.crash.bf;
cat $binshort.out.bf;
if [ `grep "traps:\|segfault" /var/log/syslog -c;` -gt $syslog_crashes ]
then
grep "traps:" /var/log/syslog | tail -n 1;
break;
fi;
done;
echo "Crash found!"
echo "Crash buffer left in: $binshort.crash.bf";
echo "Crash output left in: $binshort.out.bf";
echo;
echo "Crash data:";
od -x ./$binshort.crash.bf