How to Find Bugs While you Sleep (Fuzzing Explained)

Ready, click the button in the top right corner to generate summary
AI thinking...



Are you a security researcher or reverse engineer?

For 50% off IDA Products use promo code BILLY50, https://hex-rays.com/pricing *
For 30% off IDA Training use promo code BILLY30, https://hex-rays.com/training **

*License discounts are only valid for individuals, not corporations. Cannot be combined with any other promo code or discount.
** Cannot be combined with any other promo code or discount.

/////////////////////////////////////

Hey guys, today we’re looking at fuzzing and how it is used by security professionals and hackers to discover vulnerabilities within software in an automated fashion.

We look at the theory behind fuzzing, discuss the differences between dumb fuzzing, mutation based fuzzing, and coverage-guided fuzzing, and look at a practical example using the Jackalope fuzzer from Google to see how it finds a bug within a demo target program on macOS.

Thanks for watching
~ bellis1000

https://zygosec.com

References
https://github.com/Haifisch/kuzz/
https://github.com/google/syzkaller
https://projectzero.google/2025/05/breaking-sound-barrier-part-i-fuzzing.html
https://github.com/googleprojectzero/Jackalope

Previous Article TECLAST T70 Pro 4G released: 14-inch 2.2K large screen with Helio G100, priced at $1,699, available today!

13 Comments

  1. great content! it's way over my grasp, but i like this sort of things, hope to understand more and better in time. Thanks!

  2. 7:29 in a UNIX shell you can replace "/Users/billyellis" with "~" provided that your current user name is "billyellis".

  3. After watching your videos i bought mac and started making swift apps for iOS with some exploits big thanks to you and your content!!!!!!!

  4. Love your content man, i have been trying to learn casually for years now and you are one of the best channels i have encountered.