diff options
| author | van Hauser <vh@thc.org> | 2021-11-03 21:55:21 +0100 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-11-03 21:55:21 +0100 |
| commit | f5535e348d37460daa4c6ea43063b451aa83d9cc (patch) | |
| tree | 2339a99aa53f604cbe77b0dc88882f29ec9a6bf6 /docs/fuzzing_binary-only_targets.md | |
| parent | 25c947cd5ae93cb865081f9259255b4fdb3ca3ba (diff) | |
| parent | 9278f27d749bcf0852ba2629caa319375c9a60e4 (diff) | |
| download | afl++-f5535e348d37460daa4c6ea43063b451aa83d9cc.tar.gz | |
Merge pull request #1142 from AFLplusplus/dev
Dev
Diffstat (limited to 'docs/fuzzing_binary-only_targets.md')
| -rw-r--r-- | docs/fuzzing_binary-only_targets.md | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/docs/fuzzing_binary-only_targets.md b/docs/fuzzing_binary-only_targets.md index 8b3bbeff..ea262f6e 100644 --- a/docs/fuzzing_binary-only_targets.md +++ b/docs/fuzzing_binary-only_targets.md @@ -72,7 +72,7 @@ cd unicorn_mode If the goal is to fuzz a dynamic library then there are two options available. For both you need to write a small harness that loads and calls the library. Then you fuzz this with either frida_mode or qemu_mode, and either use -`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES` +`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES`. Another, less precise and slower option is using ptrace with debugger interrupt instrumentation: [utils/afl_untracer/README.md](../utils/afl_untracer/README.md). |