[Full-disclosure] PostgreSQL and Informix Function Fuzzing Tool

Joxean Koret joxeankoret at yahoo.es
Sat Dec 9 21:07:39 GMT 2006


Hi to all!

After the Oracle PL/SQL fuzzing tool I decided to write the same for
PostgreSQL and Informix. 

Attached goes the 2 function/stored procedure fuzzers I wrote. The
unique "interesting" thinks I found were in PostgreSQL but, as the
PostgreSQL Team say, "they are more annoyances than something else". 

Anyway, attached goes POCs for PostgreSQL which makes postmaster service
consume 100% CPU resources and the tools.

---
Joxean Koret

-------------- next part --------------
A non-text attachment was scrubbed...
Name: informix.py
Type: text/x-python
Size: 4055 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment.py 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: postgresql.py
Type: text/x-python
Size: 4457 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment-0001.py 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test1.sh
Type: application/x-shellscript
Size: 262 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test2.sh
Type: application/x-shellscript
Size: 254 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment-0001.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test3.sh
Type: application/x-shellscript
Size: 250 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment-0002.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: test4.sh
Type: application/x-shellscript
Size: 218 bytes
Desc: not available
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment-0003.bin 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada
	digitalmente
Url : http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20061209/7ae7c018/attachment-0004.bin 


Full-Disclosure is hosted and sponsored by Secunia.