Identifying a vulnerability using fuzzing

Attackers must be able to identify the right fuzzing parameters in any given application to find a vulnerability and then exploit it. In this section, we will take an example of vulnerable server, which was created by Stephen Bradshaw. This vulnerable software can be downloaded from http://sites.google.com/site/lupingreycorner/vulnserver.zip.

In this example, we will be using Windows 7 as the victim running a vulnerable server.

Once the application is downloaded, we will be unzipping the file and running the server. This should open up TCP port 9999 for the remote clients to connect. When the vulnerable server is up and running you should be able to see the following screenshot:

Attackers can connect ...

Get Mastering Kali Linux for Advanced Penetration Testing - Second Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.