Finding your first bug in C++

Now that the installation is complete, we can move on to fuzzing our first C++ project. First you have to start the CI-Daemon. Open a new terminal and start it with $ ci-daemon. For this tutorial, we are going to test CppCMS. CppCMS is a High Performance C++ Web Framework that can be found at

Download the vulnerable version 1.2.0 either through the browser or via git as follows:

$ git clone
$ git checkout v1.2.0