-
Notifications
You must be signed in to change notification settings - Fork 3
Open
Description
Command fuzzing could be made much more intelligently:
- Execute a command with (unique) random parameters
- If the handler just outputs a message to the player, try to see if it contains the command name, if so, try to parse usage (number of parameters) from it, otherwise just retry a few times with a different count of parameters
- If the command handler accesses special APIs, take note which parameter is used for the API call and use a proper value for the next retry.
cRoot:GetWorld()-> the param is a world namecWorld:GetPlayer(),cWorld:DoWithPlayer()-> the param is a player nametonumber-> a number is expected for this param
- Retry a few times with params adjusted based on the heuristics in step 3.
Metadata
Metadata
Assignees
Labels
No labels