diff options
author | van Hauser <vh@thc.org> | 2020-04-30 17:59:59 +0200 |
---|---|---|
committer | van Hauser <vh@thc.org> | 2020-04-30 17:59:59 +0200 |
commit | efa9df24c2a5f97c212a5a22dda19dcbbab0b5de (patch) | |
tree | 3cbd58983e3ebd65729c363965a178c9657259c7 /examples/afl_untracer/README.md | |
parent | a37eca9df538a4184551244d435e027ca86ccb25 (diff) | |
download | afl++-efa9df24c2a5f97c212a5a22dda19dcbbab0b5de.tar.gz |
afl-untracer completed
Diffstat (limited to 'examples/afl_untracer/README.md')
-rw-r--r-- | examples/afl_untracer/README.md | 7 |
1 files changed, 6 insertions, 1 deletions
diff --git a/examples/afl_untracer/README.md b/examples/afl_untracer/README.md index 90798028..d3af0ceb 100644 --- a/examples/afl_untracer/README.md +++ b/examples/afl_untracer/README.md @@ -3,9 +3,14 @@ afl-untracer is an example skeleton file which can easily be used to fuzz a closed source library. -It is faster and requires less memory than qemu_mode however it is way +It requires less memory than qemu_mode however it is way more course grained and does not provide interesting features like compcov or cmplog. Read and modify afl-untracer.c then `make` and use it as the afl-fuzz target (or even remote via afl-network-proxy). + +This idea is based on [UnTracer](https://github.com/FoRTE-Research/UnTracer-AFL) +and modified by [Trapfuzz](https://github.com/googleprojectzero/p0tools/tree/master/TrapFuzz). +This implementation is slower because the traps are not patched out with each +run, but on the other hand gives much better coverage information. |