MIME-Version: 1.0
Date: Tue, 1 Sep 2015 11:50:35 -0400
Message-ID: <CAGH37S+daPddzwo1bJ0sPs3RfLOE63TPkCrc-X6qhNw7nu6=Xg@mail.gmail.com>
From: Kristov Atlas <kristovatlas.lists@gmail.com>
To: bitcoin-dev@lists.linuxfoundation.org
Content-Type: multipart/alternative; boundary=047d7b339b21c818b9051eb18287
Subject: [bitcoin-dev] push tx fuzzing
Precedence: list

--047d7b339b21c818b9051eb18287
Content-Type: text/plain; charset=UTF-8

I am interested in finding or writing a fuzzer for push tx APIs. I did not
find one after a brief search. Has anyone found otherwise, or is she in the
process of writing one?

If not, what features would people recommend for a new push tx fuzzer?

Endpoints I would like to test include:

https://live.blockcypher.com/btc-testnet/pushtx/

https://insight.bitpay.com/tx/send

https://blockchain.info/pushtx

https://coinb.in/#broadcast

https://btc.blockr.io/tx/push

https://chain.localbitcoins.com/tx/send


The fuzzer should be able to send random data, invalid characters, etc. but
also fuzz particular aspects of the transaction format such as malformed
P2SH and P2PKH transactions, fields such as lock time, size, # inputs,
version number, vin size, etc. It should also be able to fuzz a variety of
valid and invalid script formats using odd op codes, changing the order of
op codes, etc.


If anyone has recommendations about how such a fuzzer should be structured,
please let me know.


Finally, if you are interested in collaborating, please contact me via
private message.


Thanks!

Kristov

--047d7b339b21c818b9051eb18287
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div><font size=3D"2"><span style=3D"font-family:arial,hel=
vetica,sans-serif">I am interested in finding or writing a fuzzer for push =
tx APIs. I did not find one after a brief search. Has anyone found otherwis=
e, or is she in the process of writing one?<br><br></span></font></div><div=
><font size=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif">If=
 not, what features would people recommend for a new push tx fuzzer? <br><b=
r></span></font></div><div><font size=3D"2"><span style=3D"font-family:aria=
l,helvetica,sans-serif">Endpoints I would like to test include:<br></span><=
/font><p dir=3D"ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom=
:0pt" id=3D"docs-internal-guid-1fad767d-8992-5f4f-2af3-4b5bbf41c9d0"><font =
size=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif"><span sty=
le=3D"color:rgb(0,0,0);background-color:transparent;font-weight:400;font-st=
yle:normal;font-variant:normal;text-decoration:none;vertical-align:baseline=
"><a href=3D"https://live.blockcypher.com/btc-testnet/pushtx/">https://live=
.blockcypher.com/btc-testnet/pushtx/</a></span></span></font></p><p dir=3D"=
ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font size=
=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif"><span style=
=3D"color:rgb(0,0,0);background-color:transparent;font-weight:400;font-styl=
e:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">=
<a href=3D"https://insight.bitpay.com/tx/send">https://insight.bitpay.com/t=
x/send</a></span></span></font></p><p dir=3D"ltr" style=3D"line-height:1.38=
;margin-top:0pt;margin-bottom:0pt"><font size=3D"2"><span style=3D"font-fam=
ily:arial,helvetica,sans-serif"><span style=3D"color:rgb(0,0,0);background-=
color:transparent;font-weight:400;font-style:normal;font-variant:normal;tex=
t-decoration:none;vertical-align:baseline"><a href=3D"https://blockchain.in=
fo/pushtx">https://blockchain.info/pushtx</a></span></span></font></p><p di=
r=3D"ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font=
 size=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif"><a href=
=3D"https://coinb.in/#broadcast" style=3D"text-decoration:none"><span style=
=3D"color:rgb(17,85,204);background-color:transparent;font-weight:400;font-=
style:normal;font-variant:normal;text-decoration:underline;vertical-align:b=
aseline">https://coinb.in/#broadcast</span></a></span></font></p><p dir=3D"=
ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font size=
=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif"><span style=
=3D"color:rgb(0,0,0);background-color:transparent;font-weight:400;font-styl=
e:normal;font-variant:normal;text-decoration:none;vertical-align:baseline">=
<a href=3D"https://btc.blockr.io/tx/push">https://btc.blockr.io/tx/push</a>=
</span></span></font></p><p dir=3D"ltr" style=3D"line-height:1.38;margin-to=
p:0pt;margin-bottom:0pt"><font size=3D"2"><span style=3D"font-family:arial,=
helvetica,sans-serif"><span style=3D"color:rgb(0,0,0);background-color:tran=
sparent;font-weight:400;font-style:normal;font-variant:normal;text-decorati=
on:none;vertical-align:baseline"><a href=3D"https://chain.localbitcoins.com=
/tx/send">https://chain.localbitcoins.com/tx/send</a></span></span></font><=
/p><p dir=3D"ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0p=
t"><br><font size=3D"2"><span style=3D"font-family:arial,helvetica,sans-ser=
if"></span></font></p><p style=3D"line-height:1.38;margin-top:0pt;margin-bo=
ttom:0pt"><font size=3D"2"><span style=3D"font-family:arial,helvetica,sans-=
serif">The fuzzer should be able to send random data, invalid characters, e=
tc. but also fuzz particular aspects of the transaction format such as malf=
ormed P2SH and P2PKH transactions, fields such as lock time, size, # inputs=
, version number, vin size, etc. It should also be able to fuzz a variety o=
f valid and invalid script formats using odd op codes, changing the order o=
f op codes, etc.</span></font></p><p style=3D"line-height:1.38;margin-top:0=
pt;margin-bottom:0pt"><br><font size=3D"2"><span style=3D"font-family:arial=
,helvetica,sans-serif"></span></font></p><p style=3D"line-height:1.38;margi=
n-top:0pt;margin-bottom:0pt"><font size=3D"2"><span style=3D"font-family:ar=
ial,helvetica,sans-serif">If anyone has recommendations about how such a fu=
zzer should be structured, please let me know.</span></font></p><p style=3D=
"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><br><font size=3D"2"><s=
pan style=3D"font-family:arial,helvetica,sans-serif"></span></font></p><p s=
tyle=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font size=3D"2"=
><span style=3D"font-family:arial,helvetica,sans-serif">Finally, if you are=
 interested in collaborating, please contact me via private message.</span>=
</font></p><p style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><=
br><font size=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif">=
</span></font></p><p style=3D"line-height:1.38;margin-top:0pt;margin-bottom=
:0pt"><font size=3D"2">Thanks!</font></p><p style=3D"line-height:1.38;margi=
n-top:0pt;margin-bottom:0pt"><font size=3D"2">Kristov</font><br></p><p styl=
e=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><font size=3D"2"><s=
pan style=3D"font-family:arial,helvetica,sans-serif"></span></font></p><p d=
ir=3D"ltr" style=3D"line-height:1.38;margin-top:0pt;margin-bottom:0pt"><fon=
t size=3D"2"><span style=3D"font-family:arial,helvetica,sans-serif"><span s=
tyle=3D"color:rgb(0,0,0);background-color:transparent;font-weight:400;font-=
style:normal;font-variant:normal;text-decoration:none;vertical-align:baseli=
ne"></span></span></font></p><font size=3D"2"><span style=3D"font-family:ar=
ial,helvetica,sans-serif"></span></font></div></div>

--047d7b339b21c818b9051eb18287--