Grinder is a more famous browser fuzz framework, written in Ruby language, mainly used as a test framework, in "White hat browser security," the author used the Nduja to generate test samples to match grinder use. According to the information on the Internet, the automatic deployment of Nduja and Fileja is grinder as the support environment by default.
Grinder is divided into
Node: Responsible for fuzz
Server: Responsible for collecting structures
I'm only building node here.
- Install the ruby2.0 environment, under Windows I use the Rubyinstaller for one-click Integrated installation.
- Put the. \grinder\node\data\x86\grinder_logger.dll in the c:\windows\system32\ directory
- Create a symbolic path
- Modify CONFIG.RB to fill in the symbol path and browser path created above
- Examples of testing under the Fuzz directory
- Run Ruby Grinder. RB --Browser=browser
Resources:
node -Browser chrome.rb firefox.rb internetexplorer.rb safari.rb -core Debug debugger.rb debuggerexception.rb heaphook.rb hookedprocess.rb logger.rb PROCESSSYMBOLS.RB configuration.rb crypt.rb debugger.rb logging.rb server.rb WEBSTATS.RB xmlcrashlog.rb -crashes -data -fuzzer *. html -lib metasm -source -- source code for some DLLs CONFIG.RB crypto.rb grinder.rb reduction.rb testcase.rbserver -- A summary of the vulnerability results used primarily for distributed nodes, not detailed here
Http://www.freebuf.com/sectool/93130.html
http://blog.nsfocus.net/web-browser-fuzzing/
Grinder Construction notes (to be continued)