diff options
| author | van Hauser <vh@thc.org> | 2019-07-25 09:00:22 +0200 |
|---|---|---|
| committer | van Hauser <vh@thc.org> | 2019-07-25 09:00:22 +0200 |
| commit | dfb3bd8e33b4f38188ebc67fd522225b111044c9 (patch) | |
| tree | 9afc05ff87fe2f23a874666b3c36d5edd0824872 /docs/binaryonly_fuzzing.txt | |
| parent | d6c2db9620f413575c4c0cd44deba9d50b01711b (diff) | |
| download | afl++-dfb3bd8e33b4f38188ebc67fd522225b111044c9.tar.gz | |
documentation update
Diffstat (limited to 'docs/binaryonly_fuzzing.txt')
| -rw-r--r-- | docs/binaryonly_fuzzing.txt | 16 |
1 files changed, 15 insertions, 1 deletions
diff --git a/docs/binaryonly_fuzzing.txt b/docs/binaryonly_fuzzing.txt index 04e449c0..fd260450 100644 --- a/docs/binaryonly_fuzzing.txt +++ b/docs/binaryonly_fuzzing.txt @@ -12,7 +12,7 @@ The following is a description of how these can be fuzzed with afl++ !!!!! TL;DR: try DYNINST with afl-dyninst. If it produces too many crashes then - use afl -Q qemu_mode. + use afl -Q qemu_mode, or better: use both in parallel. !!!!! @@ -121,6 +121,20 @@ Pintool solutions: https://github.com/spinpx/afl_pin_mode <= only old Pintool version supported +Non-AFL solutions +----------------- + +There are many binary-only fuzzing frameworks. Some are great for CTFs but don't +work with large binaries, other are very slow but have good path discovery, +some are very hard to set-up ... + +QSYM: https://github.com/sslab-gatech/qsym +Manticore: https://github.com/trailofbits/manticore +S2E: https://github.com/S2E +<please send me any missing that are good> + + + That's it! News, corrections, updates? Email vh@thc.org |