A network service on a production system keeps crashing at random times. The systems administrator suspects a bug in the listener is causing the service to crash, resuming in the a DoS. Which the…

The correct answer is A. Fuzzer. A fuzzer sends malformed, randomized, or boundary-exceeding inputs to an application to trigger unexpected behavior such as crashes. Since the administrator suspects the service crashes due to an input-handling bug in the listener, fuzzing is the appropriate tool to…

Research, Development and Collaboration

Question

A network service on a production system keeps crashing at random times. The systems administrator suspects a bug in the listener is causing the service to crash, resuming in the a DoS. Which the service crashes, a core dump is left in the /tmp directory. Which of the following tools can the systems administrator use to reproduction hese symptoms?

Options

AFuzzer
BVulnerability scanner
CCore dump analyzer
DDebugger

How the community answered

(27 responses)

A
78% (21)
B
4% (1)
C
11% (3)
D
7% (2)

Explanation

A fuzzer sends malformed, randomized, or boundary-exceeding inputs to an application to trigger unexpected behavior such as crashes. Since the administrator suspects the service crashes due to an input-handling bug in the listener, fuzzing is the appropriate tool to systematically reproduce the crash by generating a wide range of inputs until the offending condition is triggered. A vulnerability scanner (B) checks for known CVEs but does not reproduce application crashes. A core dump analyzer (C) helps interpret an existing crash dump but cannot cause new crashes. A debugger (D) steps through code execution and is useful after a crash is reproduced, not for triggering one.

Topics

#fuzzing#DoS#crash reproduction#vulnerability research

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice