How we applied advanced fuzzing techniques to cURL

Published

2024-03-01 14:30

Collected

2026-07-03 03:49

---
id: 1524
title: "How we applied advanced fuzzing techniques to cURL"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2024/03/01/toward-more-effective-curl-fuzzing/"
published_at: "2024-03-01T14:30:25Z"
tags: ["open-source", "fuzzing", "curl", "websocket", "trail-of-bits", "oss-fuzz", "hsts"]
phying_url: "https://phying.com/item/1524"
lang: en
---

# How we applied advanced fuzzing techniques to cURL

## Summary

Working with OSTIF, Trail of Bits analyzed and improved cURL's fuzzing code, adding seeds and options that doubled HSTS coverage, quintupled Alt-Svc coverage, and extended fuzzing to WebSocket.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2024-03-01T14:30:25Z
- **Original:** https://blog.trailofbits.com/2024/03/01/toward-more-effective-curl-fuzzing/
- **Phying News:** https://phying.com/item/1524