NTFuzz
A type-aware kernel fuzzing framework for Windows that uses static binary analysis to infer system call types for more effective fuzzing.
What is NTFuzz?
NTFUZZ is a type-aware kernel fuzzing framework for Windows. It uses static binary analysis to infer the data types of Windows system call arguments, then employs a kernel hooking driver to perform intelligent, type-aware mutation fuzzing on those arguments. This approach helps security researchers discover deep and complex vulnerabilities in the Windows kernel more effectively than traditional blind fuzzing methods.
Security researchers, vulnerability hunters, and academic teams focused on Windows kernel security who need a structured, type-aware approach to fuzzing system calls.
Researchers choose NTFUZZ because it provides type awareness—a significant advantage over blind fuzzing. By understanding argument types, it generates more semantically valid inputs, leading to higher code coverage and the discovery of deeper, more subtle kernel bugs that random fuzzing would miss.
Overview
NTFUZZ: Enabling Type-Aware Kernel Fuzzing on Windows with Static Binary Analysis (IEEE S&P '21)
Use Cases
Best For
- Finding zero-day vulnerabilities in the Windows kernel
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
