RtspFuzzer

This is a fuzzer for the RTSP network protocol, built with the Peach fuzzing framework.

Targets

This fuzzes programs that implement the RTSP client functionality. It fuzzes the responses to the following verbs:

• OPTIONS
• DESCRIBE
• SETUP
• PLAY
• PAUSE

It also fuzzes the following server -> client requests:

• OPTIONS
• GET_PARAMETER
• SET_PARAMETER

To Run

The RtspFuzzer is pre-configured to fuzz several common implementations of RTSP.

QuickTime

peach --definedvalues=rtsp.conf.xml rtsp.xml QuickTime

VLC Media Player

peach --definedvalues=rtsp.conf.xml rtsp.xml Vlc

OpenRTSP

peach --definedvalues=rtsp.conf.xml rtsp.xml OpenRtsp

Requirements

• Peach 3.1.45 or higher
• Debugging Tools for Windows
• .NET Framework 4.0 or higher

Fuzzing Other Clients

See the wiki for information about fuzzing a non-built-in RTSP client implementation.

Gotchas

Review the wiki for common issues that may arise when using RtspFuzzer.