Fuzzing Google Chrome DOM Browser using FreeDom Grammar-based Fuzzer - Browser Security #3

📥 Download source code and materials: https://academy.fuzzinglabs.com/introduction-browser-fuzzing?coupon=YOUTUBE In this video, I will first explain how to download Chrome ASAN build. Then, I’ll detail what is DOM (Document Object Model) and how it is used by web browsers. I'll use the FreeDom grammar-based fuzzer to generate some HTML files and create a simple script to process all those files inside chrome. Finally, I’ll show you a tip to speed up your fuzzing. #Fuzzing #browser #DOM 00:00 Introduction 00:47 What's DOM? 01:32 Download browsers (Chrome ASAN build) 03:27 FreeDom - Grammar-based Fuzzer 04:50 Generate some HTML files 07:52 Give input to Chrome ASAN 09:18 Modify the HTML file to speed up fuzzing 12:00 Create a fuzzing script 14:20 Run the fuzzer 16:25 Some improvement ideas 17:22 Replay a crashing HTML file 18:13 Going deeper & Final words ==== 💻 FuzzingLabs Training ==== - C/C++ Whitebox Fuzzing: https://academy.fuzzinglabs.com/c-whitebox-fuzzing?coupon=youtube - Rust Security Audit and Fuzzing: https://academy.fuzzinglabs.com/rust-security-audit-and-fuzzing-training?coupon=youtube - WebAssembly Reversing and Dynamic Analysis: https://academy.fuzzinglabs.com/wasm-security-reversing-dynamic-analysis?coupon=youtube - Go Security Audit and Fuzzing: https://academy.fuzzinglabs.com/go-security-audit-and-fuzzing?coupon=youtube ==== 🦄 Join the community ==== https://academy.fuzzinglabs.com/fuzzing-labs-community ==== 📡 Socials ==== - Twitter: https://twitter.com/FuzzingLabs - Telegram: https://t.me/fuzzinglabs Keywords: Fuzzing, Fuzz Testing, Firefox, Chrome, Browser, DOM, Document Object Model, Grammar-based fuzzing, FreeDom, Domato, Dharma, Binary-only fuzzing, ASAN, AddressSanitizer, Hacking Link to this video: https://youtu.be/ds8VZG8KBcA