Fuzzware: Automating & Scaling Fuzzing For Firmware by Tobias Scharnowski & Marius Muench | Nullcon

This talk addresses the challenges of analyzing firmware, particularly due to its custom and device-specific nature. The speakers introduce Fuzzware, a project designed to facilitate automated fuzz testing for deeply embedded firmware without reliance on specific hardware, employing a combination of program analysis and emulation. They share their findings from using Fuzzware, which has revealed multiple vulnerabilities in well-known network stacks used in embedded systems. The session emphasizes the importance of scalable and hardware-independent methods for firmware analysis and highlights Fuzzware's forthcoming availability as open source software to benefit the community.