tempesta-tech / tempesta-test

Test suite for Tempesta FW
10 stars 4 forks source link

Integrate frameshifter http2-to-http1 fuzzer #516

Open krizhanovsky opened 9 months ago

krizhanovsky commented 9 months ago

https://github.com/bahruzjabiyev/frameshifter is a new fuzzer discovering interesting vulnerabilities in the modern HTTP accelerators and CDNs, so let's integrate into our framework and test Tempesta FW with it. Besides security the fuzzer might reveal severe bugs like crashes, so the task is crucial.

Full paper and a short introduction video is available on https://www.usenix.org/conference/usenixsecurity22/presentation/jabiyev