diff options
author | Andrea Fioraldi <andreafioraldi@gmail.com> | 2021-10-19 13:59:38 +0200 |
---|---|---|
committer | Andrea Fioraldi <andreafioraldi@gmail.com> | 2021-10-19 13:59:38 +0200 |
commit | 23e69f11075b20c4907ebe902af08dcbb13ec175 (patch) | |
tree | 9bd59c8786c8a81370373484778c0aeb1770d095 /docs/fuzzing_binary-only_targets.md | |
parent | 77a63d8ccfd4b409c35227e174f1d6e809256e41 (diff) | |
parent | bb8a4d71da8f2b748a78ccc4416df6bffb393d80 (diff) | |
download | afl++-23e69f11075b20c4907ebe902af08dcbb13ec175.tar.gz |
Merge branch 'dev' of github.com:AFLplusplus/AFLplusplus into dev
Diffstat (limited to 'docs/fuzzing_binary-only_targets.md')
-rw-r--r-- | docs/fuzzing_binary-only_targets.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/fuzzing_binary-only_targets.md b/docs/fuzzing_binary-only_targets.md index 8b3bbeff..ea262f6e 100644 --- a/docs/fuzzing_binary-only_targets.md +++ b/docs/fuzzing_binary-only_targets.md @@ -72,7 +72,7 @@ cd unicorn_mode If the goal is to fuzz a dynamic library then there are two options available. For both you need to write a small harness that loads and calls the library. Then you fuzz this with either frida_mode or qemu_mode, and either use -`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES` +`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES`. Another, less precise and slower option is using ptrace with debugger interrupt instrumentation: [utils/afl_untracer/README.md](../utils/afl_untracer/README.md). |