Fuzzing applications needs no introduction, and I have written about some interesting problems related to fuzzing in the past [0][1][2][3]. At scale, fuzzing has traditionally focused on compiled binaries and detecting crashes and other memory corruption issues. In this blog, we’ll be looking at how you can easily fuzz scripting languages whether it be php, perl, ruby, python, or even lisp, using the fuzzing software traditionally built for binaries. We’ll also look at some interesting bug classes which can be caught this way.

Fuzzing applications needs no introduction, and I have written about some interesting problems related to fuzzing in the past [0][1][2][3]. At scale, fuzzing has traditionally focused on compiled binaries and detecting crashes and other memory corruption issues. In this blog, we’ll be looking at how you can easily fuzz scripting languages whether it be php, perl, ruby, python, or even lisp, using the fuzzing software traditionally built for binaries. We’ll also look at some interesting bug classes which can be caught this way.