Method spike definition install#
Method spike definition software#
Method spike definition code#

The program by default listens on TCP port 9999, but if you want it to listen on another port just provide the port number as a command line parameter to vulnserver.exe. Just place the two binary files from the distribution – vulnserver.exe and essfunc.dll – into the same directory and launch the program by using the Open command in OllyDbg or just double clicking on the executable. Running the Vulnserver application itself is not particularly difficult. On Vista or Windows 7 make sure you right click and select run as Adminstrator to ensure that the debugger is run with the proper privileges. On your fuzzing target system you will require Administrative rights to be able to run the Ollydbg debugger. Once this change is made you can compile SPIKE using the normal “./configure make” commands run from the src directory.

Method spike definition code#

This change will essentially cause SPIKE to exit with a non zero return code when it tries to send data to a closed socket – this becomes useful when we run SPIKE from a wrapper script later on in this article. Replace these two “return 0 ” lines with “exit(1) ”. Edit the file spike.c in SPIKE/SPIKE/src from the source tarball, and find the two “return 0 ” strings that immediately follow the lines “printf(“tried to send to a closed socket!n”) ”. īefore you actually compile SPIKE, I recommend making a small change to the source first.

Method spike definition install#

If you are using another variety of Linux you will likely need to install SPIKE from source which you can download from here.

Method spike definition software#

If you use BackTrack as your fuzzing system all of these prerequisite pieces of software will come pre-installed. Is likely to come preinstalled, otherwise should be available from your distributions package management system. Should be available from your distributions package management system or from here. The software we will need on each of the systems is as follows: If yours is listening on a different address, make sure you enter this in place of 192.168.56.101 in any of the commands that follow. My fuzzing target system was listening on the IP address 192.168.56.101. In a number of the steps in the exercises that follow, I will run commands and scripts that access my fuzzing target system by its IP address. Either (or both) of these required systems can be run as virtual machines. I recommend using a copy of BackTrack 4 Final or later as your Linux system, as all of the software that we require to perform our fuzzing work comes already included. In order to follow along with the fuzzing exercises in this article, you will need two networked systems – one Windows system (Windows XP, Vista or Windows 7) running the vulnerable application Vulnserver which will act as our fuzzing target, and one Linux system to perform the fuzzing using SPIKE.