Coverage-Guided Fuzzing of Rehosted Network Services from Firmware Images

No ratings

Presented at Recon 2025 by

Marc Heuse

In this 3-hour hands-on workshop, you'll dive deep into a real-world example of how to perform coverage-guided fuzzing of network services extracted directly from ARM,/MIPS/... firmware images. Learn to unleash a range of advanced techniques—fuzzing live over TCP, mocking network interactions, preloading libraries, or applying binary patches. By the end of this session, you'll have mastered effective strategies to uncover hidden vulnerabilities in embedded network services—all directly on your laptop and applicable to any embedded hacking.