diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/Changelog.md | 8 | ||||
| -rw-r--r-- | docs/README.md | 8 | ||||
| -rw-r--r-- | docs/binaryonly_fuzzing.md | 2 | ||||
| -rw-r--r-- | docs/ideas.md | 8 | ||||
| -rw-r--r-- | docs/power_schedules.md | 1 |
5 files changed, 16 insertions, 11 deletions
diff --git a/docs/Changelog.md b/docs/Changelog.md index 177054e2..e1f3cd7e 100644 --- a/docs/Changelog.md +++ b/docs/Changelog.md @@ -20,17 +20,21 @@ sending a mail to <afl-users+subscribe@googlegroups.com>. - python mutator modules and custom mutator modules now use the same interface and hence the API changed - AFL_AUTORESUME will resume execution without the need to specify `-i -` + - added experimental power schedule -p mmopt that ignores the runtime of + queue entries and gives higher weighting to the last 5 queue entries + it is currently experimental and subject to change but preliminary + results are good - LTO collision free instrumented added in llvm_mode with afl-clang-lto - note that this mode is amazing, but quite some targets won't compile - llvm_mode InsTrim mode: - removed workaround for bug where paths were not instrumented and imported fix by author - made skipping 1 block functions an option and is disable by default, - set AFL_LLVM_INSTRIM_SKIPSINGLEBLOCK=1 to renable this + set AFL_LLVM_INSTRIM_SKIPSINGLEBLOCK=1 to re-enable this - qemu_mode: - qemu_mode now uses solely the internal capstone version to fix builds on modern Linux distributions - - QEMU now logs routines arguments for CmpLog when the target is x86 + - QEMU now logs routine arguments for CmpLog when the target is x86 - afl-tmin: - now supports hang mode `-H` to minimize hangs - fixed potential afl-tmin missbehavior for targets with multiple hangs diff --git a/docs/README.md b/docs/README.md index 3b572d42..cfa1cfc6 100644 --- a/docs/README.md +++ b/docs/README.md @@ -1,6 +1,6 @@ # american fuzzy lop plus plus (afl++) -  +  Release Version: 2.60c @@ -11,7 +11,7 @@ Originally developed by Michal "lcamtuf" Zalewski. - Repository: [https://github.com/vanhauser-thc/AFLplusplus](https://github.com/vanhauser-thc/AFLplusplus) + Repository: [https://github.com/AFLplusplus/AFLplusplus](https://github.com/AFLplusplus/AFLplusplus) afl++ is maintained by Marc "van Hauser" Heuse <mh@mh-sec.de>, Heiko "hexcoder-" Eißfeldt <heiko.eissfeldt@hexco.de>, Andrea Fioraldi <andreafioraldi@gmail.com> and Dominik Maier <mail@dmnk.co>. @@ -75,7 +75,7 @@ So all in all this is the best-of afl that is currently out there :-) For new versions and additional information, check out: - [https://github.com/vanhauser-thc/AFLplusplus](https://github.com/vanhauser-thc/AFLplusplus) + [https://github.com/AFLplusplus/AFLplusplus](https://github.com/AFLplusplus/AFLplusplus) To compare notes with other users or get notified about major new features, send a mail to <afl-users+subscribe@googlegroups.com>. @@ -675,7 +675,7 @@ Thank you! ## 16) Contact Questions? Concerns? Bug reports? The contributors can be reached via -[https://github.com/vanhauser-thc/AFLplusplus](https://github.com/vanhauser-thc/AFLplusplus) +[https://github.com/AFLplusplus/AFLplusplus](https://github.com/AFLplusplus/AFLplusplus) There is also a mailing list for the afl project; to join, send a mail to <afl-users+subscribe@googlegroups.com>. Or, if you prefer to browse diff --git a/docs/binaryonly_fuzzing.md b/docs/binaryonly_fuzzing.md index e49c9b3e..f005a9b7 100644 --- a/docs/binaryonly_fuzzing.md +++ b/docs/binaryonly_fuzzing.md @@ -148,7 +148,7 @@ There is a WIP fuzzer available at [https://github.com/andreafioraldi/frida-fuzzer](https://github.com/andreafioraldi/frida-fuzzer) There is also an early implementation in an AFL++ test branch: - [https://github.com/vanhauser-thc/AFLplusplus/tree/frida](https://github.com/vanhauser-thc/AFLplusplus/tree/frida) + [https://github.com/AFLplusplus/AFLplusplus/tree/frida](https://github.com/AFLplusplus/AFLplusplus/tree/frida) ## PIN & DYNAMORIO diff --git a/docs/ideas.md b/docs/ideas.md index f18b0f6d..44dcccb2 100644 --- a/docs/ideas.md +++ b/docs/ideas.md @@ -4,7 +4,7 @@ In the following, we describe a variety of ideas that could be implemented for future AFL++ versions. For GSOC2020 interested students please see -[https://github.com/vanhauser-thc/AFLplusplus/issues/208](https://github.com/vanhauser-thc/AFLplusplus/issues/208) +[https://github.com/AFLplusplus/AFLplusplus/issues/208](https://github.com/AFLplusplus/AFLplusplus/issues/208) ## Flexible Grammar Mutator @@ -52,7 +52,7 @@ There also is/was a FreeBSD project at [https://github.com/veracode-research/fre This enables snapshot fuzzing on Linux with an incredible performance! Mentor: any -Idea/Issue tracker: [https://github.com/vanhauser-thc/AFLplusplus/issues/248](https://github.com/vanhauser-thc/AFLplusplus/issues/248) +Idea/Issue tracker: [https://github.com/AFLplusplus/AFLplusplus/issues/248](https://github.com/AFLplusplus/AFLplusplus/issues/248) ## QEMU 4-based Instrumentation @@ -111,10 +111,10 @@ Note: this is already in development for qemu by Andrea, so for people who want to contribute it might make more sense to port his solution to unicorn. Mentor: andreafioraldi or domenukk -Issue/idea tracker: [https://github.com/vanhauser-thc/AFLplusplus/issues/237](https://github.com/vanhauser-thc/AFLplusplus/issues/237) +Issue/idea tracker: [https://github.com/AFLplusplus/AFLplusplus/issues/237](https://github.com/AFLplusplus/AFLplusplus/issues/237) ## Your idea! Finally, we are open to proposals! -Create an issue at https://github.com/vanhauser-thc/AFLplusplus/issues and let's discuss :-) +Create an issue at https://github.com/AFLplusplus/AFLplusplus/issues and let's discuss :-) diff --git a/docs/power_schedules.md b/docs/power_schedules.md index 4026aedf..cdada0f6 100644 --- a/docs/power_schedules.md +++ b/docs/power_schedules.md @@ -19,6 +19,7 @@ We find that AFL's exploitation-based constant schedule assigns **too much energ | `-p quad` |  | | `-p lin` |  | | `-p exploit` (AFL) |  | +| `-p mmopt` | Experimental: `explore` with no weighting to runtime and increased weighting on the last 5 queue entries | where *α(i)* is the performance score that AFL uses to compute for the seed input *i*, *β(i)>1* is a constant, *s(i)* is the number of times that seed *i* has been chosen from the queue, *f(i)* is the number of generated inputs that exercise the same path as seed *i*, and *μ* is the average number of generated inputs exercising a path. More details can be found in the paper that was accepted at the [23rd ACM Conference on Computer and Communications Security (CCS'16)](https://www.sigsac.org/ccs/CCS2016/accepted-papers/). |