aboutsummaryrefslogtreecommitdiff
path: root/docs/fuzzing_binary-only_targets.md
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2023-12-24 11:08:26 +0100
committerGitHub <noreply@github.com>2023-12-24 11:08:26 +0100
commitdcb5bc3fa5b48b316719cb6abab856697dc29bda (patch)
tree71f058cf819e53307ef24c5092b38b72f5b321fe /docs/fuzzing_binary-only_targets.md
parent108fb0b29ad1586e668ba23e23a0eb1a13c45c49 (diff)
parentdaaefcddc063b356018c29027494a00bcfc3e240 (diff)
downloadafl++-dcb5bc3fa5b48b316719cb6abab856697dc29bda.tar.gz
Merge pull request #1941 from AFLplusplus/dev
push to stable
Diffstat (limited to 'docs/fuzzing_binary-only_targets.md')
-rw-r--r--docs/fuzzing_binary-only_targets.md8
1 files changed, 1 insertions, 7 deletions
diff --git a/docs/fuzzing_binary-only_targets.md b/docs/fuzzing_binary-only_targets.md
index 9d9d6bb6..a151bce4 100644
--- a/docs/fuzzing_binary-only_targets.md
+++ b/docs/fuzzing_binary-only_targets.md
@@ -94,8 +94,7 @@ For more information, see
In FRIDA mode, you can fuzz binary-only targets as easily as with QEMU mode.
FRIDA mode is most of the times slightly faster than QEMU mode. It is also
-newer, lacks COMPCOV, and has the advantage that it works on MacOS (both intel
-and M1).
+newer, and has the advantage that it works on MacOS (both intel and M1).
To build FRIDA mode:
@@ -113,10 +112,6 @@ The mode is approximately 2-5x slower than compile-time instrumentation, and is
less conducive to parallelization. But for binary-only fuzzing, it gives a huge
speed improvement if it is possible to use.
-If you want to fuzz a binary-only library, then you can fuzz it with frida-gum
-via frida_mode/. You will have to write a harness to call the target function in
-the library, use afl-frida.c as a template.
-
You can also perform remote fuzzing with frida, e.g., if you want to fuzz on
iPhone or Android devices, for this you can use
[https://github.com/ttdennis/fpicker/](https://github.com/ttdennis/fpicker/) as
@@ -302,7 +297,6 @@ some are very hard to set up...
* S2E: [https://github.com/S2E](https://github.com/S2E)
* TinyInst:
[https://github.com/googleprojectzero/TinyInst](https://github.com/googleprojectzero/TinyInst)
- (Mac/Windows only)
* ... please send me any missing that are good
## Closing words