The Hacker News"IOCTL Fuzzer is a tool designed to automate the task of searching vulnerabilities in Windows kernel drivers by performing fuzz tests on them. The fuzzer's own driver hooks NtDeviceIoControlFile in order to take control of all IOCTL requests throughout the system. While processing IOCTLs, the fuzzer will spoof those IOCTLs conforming to conditions specified in the configuration file. A spoofed IOCTL is identical to the original in all respects except the input data, which is changed to randomly generated fuzz."


Features and support added in new IOCTL Fuzzer version 1.2:
  • Windows 7 support
  • Full support of 64-bit versions of Windows
  • Exceptions monitoring
  • "Fair Fuzzing" feature
  • Different data generation modes
  • Boot fuzzing (during OS initialization)
Download IOCTL Fuzzer v1.2 (ioctl_fuzzer-1.2.zip) here
Found this article interesting? Follow us on Twitter and LinkedIn to read more exclusive content we post.