about summary refs log tree commit diff
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2020-08-10 00:56:08 +0200
committervan Hauser <vh@thc.org>2020-08-10 00:56:08 +0200
commit5e36fb32a8f1cae611129f08852f59b036c01781 (patch)
tree03a15fd8c80c1fc3abb8834613209418a65f89e5
parentfb0181f5bc8c258fedc7c9cf2c933287e00d2ec5 (diff)
downloadafl++-5e36fb32a8f1cae611129f08852f59b036c01781.tar.gz
readme
-rw-r--r--README.md10
1 files changed, 9 insertions, 1 deletions
diff --git a/README.md b/README.md
index 23b71c8e..dbf54075 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,12 @@
 # qemu_taint variant.
 
-CAVEATS:
+## HOWTO
+
+cd qemu_taint && ./build_qemu_taint.sh
+
+afl-fuzz -A ...
+
+## CAVEATS
 
  * shmem persistent mode does not work
  * custom mutators? dunno if they work or not
@@ -8,6 +14,8 @@ CAVEATS:
  * not tested with qemu_mode
  * if all seed entries are fully touched it might not work
 
+## THE TAINT
+
 taint can be seen in out/taint/
 
 the id:000 mirrors the out/queue entry, except the content it 0x00 for