diff options
author | WorksButNotTested <62701594+WorksButNotTested@users.noreply.github.com> | 2021-06-25 22:14:27 +0100 |
---|---|---|
committer | GitHub <noreply@github.com> | 2021-06-25 23:14:27 +0200 |
commit | 6a3877dcd35d31eb79bebbc30ffe70ac0342743e (patch) | |
tree | f3ddccc0e1315a728fe5b12fdf10990f48f05298 /frida_mode/test/js/patch.js | |
parent | c88b98d1c91b37c1941483980161bd46cb03c4d5 (diff) | |
download | afl++-6a3877dcd35d31eb79bebbc30ffe70ac0342743e.tar.gz |
Improved FRIDA mode scripting support (#994)
Co-authored-by: Your Name <you@example.com>
Diffstat (limited to 'frida_mode/test/js/patch.js')
-rw-r--r-- | frida_mode/test/js/patch.js | 34 |
1 files changed, 34 insertions, 0 deletions
diff --git a/frida_mode/test/js/patch.js b/frida_mode/test/js/patch.js new file mode 100644 index 00000000..485a434f --- /dev/null +++ b/frida_mode/test/js/patch.js @@ -0,0 +1,34 @@ +Afl.print('******************'); +Afl.print('* AFL FRIDA MODE *'); +Afl.print('******************'); +Afl.print(''); + +const main = DebugSymbol.fromName('main').address; +Afl.print(`main: ${main}`); +Afl.setEntryPoint(main); +Afl.setPersistentAddress(main); +Afl.setPersistentCount(10000000); + +const crc32_check = DebugSymbol.fromName('crc32_check').address; +const crc32_replacement = new NativeCallback( + (buf, len) => { + Afl.print(`len: ${len}`); + if (len < 4) { + return 0; + } + + return 1; + }, + 'int', + ['pointer', 'int']); +Interceptor.replace(crc32_check, crc32_replacement); + +const some_boring_bug = DebugSymbol.fromName('some_boring_bug').address +const boring_replacement = new NativeCallback( + (c) => { }, + 'void', + ['char']); +Interceptor.replace(some_boring_bug, boring_replacement); + +Afl.done(); +Afl.print("done"); |