0dayResearchLab / msFuzz

Targeting Windows Kernel Driver Fuzzer

MS Fuzz

MS Fuzzer is coverage-guided Fuzzer that is targeting Windows Kernel Driver.

Feature

• MS Fuzzer uses Intel PT to achieve code coverage.
• The MS Fuzzer follows an AFL-like design and can detect semi-stateful bugs.
• MS Fuzzer is a well-designed fuzzer based on Nyx-Fuzzer / kAFL and Redqueen.
• Designed to find bugs for windows Driver that interact with user using DeviceIoControl.

Requirements

• Intel Skylake or later: The setup requires a Gen-6 or newer Intel CPU (for Intel PT) and adequate system memory (~2GB RAM per CPU)

• Patched Host Kernel: A modified Linux host kernel will be installed as part of the setup. Running kAFL inside a VM may work starting IceLake or later CPU.

• Ubuntu: The installation and tutorials are tested for recent Ubuntu 20.04.6 LTS.

Our Achievements

• 100+ Security Bugs in 100 days
• 20+ EoP ( Elevation of Privilege )

For more Detail

• msFuzz Internal

How to use

• How to use