4D Fuzzer (a MAVLink fuzzer)

Description

4D Fuzzer is a fuzzer for fuzzing programs that use MAVLink written in Python3.

Guideline

Our Drone Hacking Guideline is here

Quick Start

In order to run this fuzzer, you need to get your target software installed and running.

The following are installation document links.

• PX4-Autopilot : https://docs.px4.io/master/en/dev_setup/building_px4.html
• QGroundControl : https://dev.qgroundcontrol.com/master/en/getting_started/
• MAVROS : https://docs.px4.io/master/en/ros/mavros_installation.html

If you want to test the PX4 simulator, run it as follows.

python3 4dfuzzer.py

If you want to test using serial communication, run it as follows.

python3 4dfuzzer.py -s [port]

If you want to set it up for each msgid, run it as follows.

python3 4dfuzzer.py -I [iteration]

Target Program

PX4-Autopilot Software
QGroundControl
MAVROS

Results

So far the following bugs have been identified:

patched

• PX4-Autopilot/pull/18371
• PX4-Autopilot/pull/184114
• PX4-Autopilot/pull/18655
• qgroundcontrol/pull/10022
• qgroundcontrol/pull/10038
• qgroundcontrol/pull/10062
• MAVROS/pull/1667
• MAVROS/pull/1675

Usage

Usage:                [-h, --help] [-m mode] [-i ip] [-p port]
                                      [-I iteration] [-s port]

Optional arguments:                                           
 -h, --help          Show up Options                          
 -m mode             Selcet Target PX4,QGC,MAVROS[default PX4]
 -i ip               Set the Target ip [default 127.0.0.1]    
 -p port             Set the Target port [default 18570]      
 -s port             Use Serial port                          
 -I iteartion per each msgID [default iteration=1]