


StateModel: it is responsible for managing the flow of data during the fuzzing process.We’ll use the DataModel to provide Peach with the data structure layout of the CUR file format. DataModel: it is used to define the structure of our data.For the below explanation I’ve heavily relied on the Peach Fuzzing: Getting Started & Peach Fuzzer: Data Modelling resources. As I’ve previously anticipated, today I’m going to disclose the fuzzing methodology, process and samples that led me to discover five different vulnerabilities in FastStone Image Viewer v.īefore we can start with the “smart” way, let me detail some information regarding the Peach’s Pit file structure. In my precedent blog post I’ve introduced “fuzzing” from a theoretical point of view.
