about summary refs log tree commit diff
path: root/examples/afl_untracer/README.md
diff options
context:
space:
mode:
authorvan Hauser <vh@thc.org>2020-04-30 17:59:59 +0200
committervan Hauser <vh@thc.org>2020-04-30 17:59:59 +0200
commitefa9df24c2a5f97c212a5a22dda19dcbbab0b5de (patch)
tree3cbd58983e3ebd65729c363965a178c9657259c7 /examples/afl_untracer/README.md
parenta37eca9df538a4184551244d435e027ca86ccb25 (diff)
downloadafl++-efa9df24c2a5f97c212a5a22dda19dcbbab0b5de.tar.gz
afl-untracer completed
Diffstat (limited to 'examples/afl_untracer/README.md')
-rw-r--r--examples/afl_untracer/README.md7
1 files changed, 6 insertions, 1 deletions
diff --git a/examples/afl_untracer/README.md b/examples/afl_untracer/README.md
index 90798028..d3af0ceb 100644
--- a/examples/afl_untracer/README.md
+++ b/examples/afl_untracer/README.md
@@ -3,9 +3,14 @@
 afl-untracer is an example skeleton file which can easily be used to fuzz
 a closed source library.
 
-It is faster and requires less memory than qemu_mode however it is way
+It requires less memory than qemu_mode however it is way
 more course grained and does not provide interesting features like compcov
 or cmplog.
 
 Read and modify afl-untracer.c then `make` and use it as the afl-fuzz target
 (or even remote via afl-network-proxy).
+
+This idea is based on [UnTracer](https://github.com/FoRTE-Research/UnTracer-AFL)
+and modified by [Trapfuzz](https://github.com/googleprojectzero/p0tools/tree/master/TrapFuzz).
+This implementation is slower because the traps are not patched out with each
+run, but on the other hand gives much better coverage information.