PDA

View Full Version : Guide to setting up BFF using VirtualBox on Ubuntu 10.04



shayno90
May 9th, 2013, 04:46 PM
The Basic Fuzzing Framework (BFF) consists of two main parts:

a Linux virtual machine that has been optimized for fuzzing
a set of scripts and a configuration file that orchestrate the fuzzing run


1.Download BFF Debian VDMK file and Fuzzing scripts:
http://www.cert.org/download/bff/d.html
(Latest version is 2.6)

2.Launch virtual box and setup Virtual Debian BFF machine:
http://askubuntu.com/questions/14254...-on-virtualbox (http://askubuntu.com/questions/142549/how-to-install-ubuntu-on-virtualbox)

Important to select at least:
512mb plus for memory
Use existing disk (point to file location of Debian vmdk image)
Use VMDK image

3.Continue with the rest of the setup and finally launch the virtual vmdk image.

4. IMPORTANT (ADD YOUR USER ACCOUNT TO VBOXUSERS GROUP TO ALLOW USB DEVICE SHARING)
http://www.techfurs.net/1/post/2011/...on-ubuntu.html (http://www.techfurs.net/1/post/2011/09/how-to-enable-virtualbox-usb-support-on-ubuntu.html)

a.Enter this into the terminal, gpasswd -a 'yourusername' vboxusers
b. Logout of your account then log back in.
c. Open up VirtualBox and USB support should be enable. Sellect the USB drive like you would on Windows.

5.Next install Guest additions package on the virtual machine in order to mount USB device:
http://virtualboxes.org/doc/installi...ons-on-debian/ (http://virtualboxes.org/doc/installing-guest-additions-on-debian/)

a.Login as root;
b.Update your APT database with apt-get update;
c. Install the latest security updates with apt-get upgrade;
d. Install required packages with apt-get install build-essential module-assistant;
e. Configure your system for building kernel modules by running m-a prepare;
f.Click on Install Guest Additions… from the Devices menu, then run mount /media/cdrom.
g.Run sh /media/cdrom/VBoxLinuxAdditions.run, and follow the instructions on screen.

6.Finally you need to point the virtual machine to a media directory containing the
fuzzing scripts in order to start the BFF testing.
http://asimplediscipleslife.blogspot...mework-in.html (http://asimplediscipleslife.blogspot.ie/2011/08/cert-basic-fuzzing-framework-in.html)

Set up the user to use the Virtual Box group as the default group (do this on virtual machine)
a.sudo usermod -g vboxsf fuzz
b. Add a symlink where the framework expects the shared folder to be installed:
c. cd /mnt/hgfs; sudo ln -s /media/sf_fuzz fuzz
d. Restart the virtual machine, and you should be ready