Uploaded June 2021 | Updated September 2026, 2 weeks ago
One fuzzer found a crash. Now we need to investigate if it's a 0day or if we found the known bug. To do that we first minimize the testcase, and then perform various tests and sanity checks.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-sudoedit/fuzzing-setuid-binary
Join the Hextree Discord: discord.gg/xgQpCQCpvy
Long version with Q&A: youtube.com/watch?v=uDSbYM5g-1M
Grab the files: github.com/LiveOverflow/pwnedit/tree/main/episode05
The whole playlist: youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Article version: liveoverflow.com/minimizing-afl-testcases-sudo5
gef for gdb: github.com/hugsy/gef
CHAPTERS
00:00 - Recap of Fuzzing Experiment: afl vs afl++
00:44 - We found a crash!
01:45 - First Look at the Crash Testcase
02:57 - Looking at Crash in GDB
04:06 - Is it a 0day or the Known Bug?
05:28 - Minimizing AFL Testcase
07:16 - Looking at Minimized Testcase
08:23 - Next Steps
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#LinuxSecurity #SecurityResearch #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
One fuzzer found a crash. Now we need to investigate if it's a 0day or if we found the known bug. To do that we first minimize the testcase, and then perform various tests and sanity checks.
LEARN ON HEXTREE (ad)
Learn hacking on Hextree: hextree.io
Watch this video and more on Hextree: app.hextree.io/courses/yt-sudoedit/fuzzing-setuid-binary
Join the Hextree Discord: discord.gg/xgQpCQCpvy
Long version with Q&A: youtube.com/watch?v=uDSbYM5g-1M
Grab the files: github.com/LiveOverflow/pwnedit/tree/main/episode05
The whole playlist: youtube.com/playlist?list=PLhixgUqwRTjy0gMuT4C3bmjeZjuNQyqdx
Article version: liveoverflow.com/minimizing-afl-testcases-sudo5
gef for gdb: github.com/hugsy/gef
CHAPTERS
00:00 - Recap of Fuzzing Experiment: afl vs afl++
00:44 - We found a crash!
01:45 - First Look at the Crash Testcase
02:57 - Looking at Crash in GDB
04:06 - Is it a 0day or the Known Bug?
05:28 - Minimizing AFL Testcase
07:16 - Looking at Minimized Testcase
08:23 - Next Steps
SUPPORT
Per video: patreon.com/join/liveoverflow
Per month: youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join
Buy my handwriting font (ad): shop.liveoverflow.com
WATCH, FOLLOW & READ
Second channel: youtube.com/LiveUnderflow
Twitch: twitch.tv/LiveOverflow
Twitter: twitter.com/LiveOverflow
Instagram: instagram.com/LiveOverflow
TikTok: tiktok.com/@liveoverflow_
LiveOverflow blog: liveoverflow.com
Hextree blog (ad): hextree.io/blog
#LinuxSecurity #SecurityResearch #LiveOverflow
(ad) LiveOverflow YouTube channel is supported by advertisement and product placement.
