nach der Bestellung gedruckt Neuware - Printed after ordering - Find security flaws in any architecture effectively through emulation and fuzzing with QEMU and AFLPurchase of the print or Kindle book includes a free PDF Elektronisches BuchKey Features:Understand the vulnerability landscape and useful tools such as QEMU and AFLExplore use cases to find vulnerabilities and execute unknown firmwareCreate your own firmware emulation and fuzzing environment to discover vulnerabilitiesBook Description:Emulation and fuzzing are among the many techniques that can be used to improve cybersecurity; however, utilizing these efficiently can be tricky. Fuzzing Against the Machine is your hands-on guide to understanding how these powerful tools and techniques work. Using a variety of real-world use cases and practical examples, this book helps you grasp the fundamental concepts of fuzzing and emulation along with advanced vulnerability research, providing you with the tools and skills needed to find security flaws in your software.The book begins by introducing you to two open source fuzzer engines: QEMU, which allows you to run software for whatever architecture you can think of, and American fuzzy lop (AFL) and its improved version AFL++. You'll learn to combine these powerful tools to create your own emulation and fuzzing environment and then use it to discover vulnerabilities in various systems, such as iOS, Android, and Samsung's Mobile Baseband software, Shannon. After reading the introductions and setting up your environment, you'll be able to dive into whichever chapter you want, although the topics gradually become more advanced as the book progresses.By the end of this book, you'll have gained the skills, knowledge, and practice required to find flaws in any firmware by emulating and fuzzing it with QEMU and several fuzzing engines.What You Will Learn:Understand the difference between emulation and virtualizationDiscover the importance of emulation and fuzzing in cybersecurityGet to grips with fuzzing an entire operating systemDiscover how to inject a fuzzer into proprietary firmwareKnow the difference between static and dynamic fuzzingLook into combining QEMU with AFL and AFL++Explore Fuzz peripherals such as modemsFind out how to identify vulnerabilities in OpenWrtWho this book is for:This book is for security researchers, security professionals, embedded firmware engineers, and embedded software professionals. Learners interested in emulation, as well as software engineers interested in vulnerability research and exploitation, software testing, and embedded software development will also find it useful. The book assumes basic knowledge of programming (C and Python); operating systems (Linux and macOS); and the use of Linux shell, compilation, and debugging.

Seller Inventory # 9781804614976

Contact seller

Report this item

Bibliographic Details

Title: Fuzzing Against the Machine : Automate vulnerability research with emulated IoT devices on QEMU
Publisher: Packt Publishing
Publication Date: 2023
Language: English
ISBN 10: 1804614971
ISBN 13: 9781804614976
Binding: Taschenbuch
Condition: Neu
Dimensions: 235 millimeters width by 191 millimeters height by 14 millimeters depth
Weight: 453 grams

About this title

Synopsis

Find security flaws in any architecture effectively through emulation and fuzzing with QEMU and AFL

Purchase of the print or Kindle book includes a free PDF eBook

Key Features

Understand the vulnerability landscape and useful tools such as QEMU and AFL
Explore use cases to find vulnerabilities and execute unknown firmware
Create your own firmware emulation and fuzzing environment to discover vulnerabilities

Book Description

Emulation and fuzzing are among the many techniques that can be used to improve cybersecurity; however, utilizing these efficiently can be tricky. Fuzzing Against the Machine is your hands-on guide to understanding how these powerful tools and techniques work. Using a variety of real-world use cases and practical examples, this book helps you grasp the fundamental concepts of fuzzing and emulation along with advanced vulnerability research, providing you with the tools and skills needed to find security flaws in your software.

The book begins by introducing you to two open source fuzzer engines: QEMU, which allows you to run software for whatever architecture you can think of, and American fuzzy lop (AFL) and its improved version AFL++. You’ll learn to combine these powerful tools to create your own emulation and fuzzing environment and then use it to discover vulnerabilities in various systems, such as iOS, Android, and Samsung's Mobile Baseband software, Shannon. After reading the introductions and setting up your environment, you’ll be able to dive into whichever chapter you want, although the topics gradually become more advanced as the book progresses.

By the end of this book, you’ll have gained the skills, knowledge, and practice required to find flaws in any firmware by emulating and fuzzing it with QEMU and several fuzzing engines.

What you will learn

Understand the difference between emulation and virtualization
Discover the importance of emulation and fuzzing in cybersecurity
Get to grips with fuzzing an entire operating system
Discover how to inject a fuzzer into proprietary firmware
Know the difference between static and dynamic fuzzing
Look into combining QEMU with AFL and AFL++
Explore Fuzz peripherals such as modems
Find out how to identify vulnerabilities in OpenWrt

Who this book is for

This book is for security researchers, security professionals, embedded firmware engineers, and embedded software professionals. Learners interested in emulation, as well as software engineers interested in vulnerability research and exploitation, software testing, and embedded software development will also find it useful. The book assumes basic knowledge of programming (C and Python); operating systems (Linux and macOS); and the use of Linux shell, compilation, and debugging.

Who this book is for
History of emulation
Qemu from the ground
Qemu Execution Modes and Fuzzing
A Famous Refrain: AFL+QEMU = CVEs
Modifying QEMU for basic instrumentation
Real-life Case Study: Samsung Exynos Baseband
Case Study: OpenWRT full system fuzzing
Case Study: OpenWRT System Fuzzing for ARM
Finally Here: iOS Full System Fuzzing
Deus Ex Machina: Fuzzing Android Libraries
Conclusion and Final Remarks

About the Author

Antonio Nappa is an Application Analysis Team Leader at Zimperium Inc. He has been in the cybersecurity game since 17 years old. He holds a PhD in Software and Systems from the Madrid Institute of Advanced Studies. He has been a visiting scholar at UC Berkeley. His contributions have been published and recognized in international peer-reviewed venues. Since the DEFCON 2008 Finals, he never goes to sleep with a segfault.

Eduardo Bl�zquez is a PhD student of the University Carlos III of Madrid. He has been working in the cybersecurity area since 2017, with interests in Reverse Engineering and Malware Analysis. Currently, he is doing a PhD thesis about Android Security, but in his spare time he likes to study different topics like program analysis or operating system internals, and from time to time he likes to play different wargames about software exploitation.

"About this title" may belong to another edition of this title.

Store Description

Das Unternehmen AHA-BUCH GmbH: Seit der Gr�ndung von AHA-BUCH im Juli 2005 ist unser Hauptziel, zufriedenen Kunden so schnell und so preisg�nstig wie m�glich ihren B�cherwunsch zu erf�llen. Unsere Firma besch�ftigt 16 Mitarbeiter, die nur ein Ziel kennen: den Kunden und seine W�nsche! Auf �ber 3700 m2 Fl�che haben wir �ber 100.000 B�cher, Modernes Antiquariat und Spiele auf Lager.

Visit Seller's Storefront

Seller's business information

AHA-BUCH GmbH
Garlebsen 48, Einbeck, 37574, Germany

Sale & Shipping Terms

Terms of Sale

General Terms and Conditions and Customer Information / Privacy Policy

I. General Terms and Conditions

� 1 Basic provisions

(1) The following terms and conditions apply to all contracts that you conclude with us as a provider (AHA-BUCH GmbH) via the Internet platforms AbeBooks and/or ZVAB. Unless otherwise agreed, the inclusion of any of your own terms and conditions used by you will be objected to

(2) A consumer within the meaning of the following regulations is any natural person who concludes...

More Information

Right of cancellation

**Right of withdrawal for consumers **

(A consumer is any natural person who concludes a legal transaction for purposes that can predominantly be attributed neither to their commercial nor their independent professional activity.)

Cancellation
Withdrawal
You have the right to revoke this contract within fourteen days without giving reasons.
The revocation period is fourteen days from the day,

on which you or a third party named by you, who is not the carrier, has taken possession of the goods, provided that you have ordered one or more goods within the framework of a uniform order and these are or will be delivered uniformly;
on which you or a third party named by you, who is not the carrier, has taken possession of the last goods, provided that you have ordered several goods within the framework of a single order and these are delivered separately;
on which you or a third party named by you, who is not the carrier, has taken possession of the last partial shipment or the last piece, provided that you have ordered goods that are delivered in several partial shipments or pieces;

In order to exercise your right of withdrawal, you must inform us (AHA-BUCH GmbH, Garlebsen 48, 37574 Einbeck, telephone number: 05563 9996039, fax number: 05563 9995974, e-mail address: service@aha-buch.de) of your decision to revoke this contract by means of a clear declaration (e.B. a letter sent by post, fax or e-mail). You can use the attached model withdrawal form, but this is not mandatory.

To comply with the revocation period, it is sufficient that you send the notification of the exercise of the right of revocation before the expiry of the revocation period.

Consequences of revocation

If you withdraw from this contract, we shall reimburse you all payments that we have received from you, including delivery costs (with the exception of the additional costs resulting from the fact that you have chosen a different type of delivery than the cheapest standard delivery offered by us), immediately and at the latest within fourteen days from the day on which we received the notification of your revocation of this contract.
For this repayment, we will use the same means of payment that you used for the original transaction, unless expressly agreed otherwise with you; in no case will you be charged any fees for this repayment.

We may withhold reimbursement until we have received the goods back or until you have provided proof that you have returned the goods, whichever is the earlier.

You must return or hand over the goods to us immediately and in any case at the latest within fourteen days from the day on which you inform us of the revocation of this contract. The deadline is met if you send the goods before the expiry of the period of fourteen days.

You bear the direct costs of returning the goods.

You only have to pay for any loss of value of the goods if this loss of value is due to handling of the goods that is not necessary to check the nature, characteristics and functioning of the goods.

Reasons for exclusion or extinction

The right of revocation does not apply to contracts

for the delivery of goods which are not prefabricated and for the manufacture of which an individual choice or determination by the consumer is decisive or which are clearly tailored to the personal needs of the consumer;
for the delivery of goods that can spoil quickly or whose expiry date would be exceeded quickly;
for the delivery of alcoholic beverages, the price of which was agreed at the time of conclusion of the contract, but which can be delivered at the earliest 30 days after conclusion of the contract and whose current value depends on fluctuations in the market over which the entrepreneur has no influence;
for the delivery of newspapers, magazines or magazines with the exception of subscription contracts.

The right of revocation expires prematurely in the case of contracts

for the delivery of sealed goods that are not suitable for return for reasons of health protection or hygiene, if their seal has been removed after delivery;
for the delivery of goods if they have been inseparably mixed with other goods after delivery due to their nature;
for the delivery of sound or video recordings or computer software in a sealed package, if the seal has been removed after delivery.

Sample withdrawal form

(If you want to cancel the contract, please fill out this form and send it back.)

To AHA-BUCH GmbH, Garlebsen 48, 37574 Einbeck, fax number: 05563 9995974, e-mail address: service@aha-buch.de :
I/we () hereby revoke the contract concluded by me/us () for the purchase of the following goods ()/
the provision of the following service ()
Ordered on ()/ received on ()
Name of the consumer(s)
Address of the consumer(s)
Signature of the consumer(s) (only in case of notification on paper)
Date

(*) Delete as appropriate.

Shipping Terms

We ship your order after we received them
for articles on hand latest 24 hours,
for articles with overnight supply latest 48 hours.
In case we need to order an article from our supplier our dispatch time depends on the reception date of the articles, but the articles will be shipped on the same day.

Our goal is to send the ordered articles in the fastest, but also most efficient and secure way to our customers.

Shipping rates from Germany to U.S.A.

Shipping rates from Germany to U.S.A.
Order quantity	30 to 40 business days	7 to 14 business days
First item	� 54.54	� 63.29

Delivery times are set by sellers and vary by carrier and location. Orders passing through Customs may face delays and buyers are responsible for any associated duties or fees. Sellers may contact you regarding additional charges to cover any increased costs to ship your items.

Detailed Seller Information