diff options
Diffstat (limited to 'docs')
-rw-r--r-- | docs/branches.md | 3 | ||||
-rw-r--r-- | docs/fuzzing_binary-only_targets.md | 2 | ||||
-rw-r--r-- | docs/fuzzing_expert.md | 2 | ||||
-rw-r--r-- | docs/life_pro_tips.md | 20 | ||||
-rw-r--r-- | docs/triaging_crashes.md | 2 |
5 files changed, 15 insertions, 14 deletions
diff --git a/docs/branches.md b/docs/branches.md index 98fd6827..ae147b08 100644 --- a/docs/branches.md +++ b/docs/branches.md @@ -7,4 +7,5 @@ The following branches exist: * [dev](https://github.com/AFLplusplus/AFLplusplus/tree/dev): development state of AFL++ - bleeding edge and you might catch a checkout which does not compile or has a bug. *We only accept PRs in dev!!* * (any other): experimental branches to work on specific features or testing new functionality or changes. -For releases, please see the [Releases](https://github.com/AFLplusplus/AFLplusplus/releases) tab. Also take a look at the list of [major changes in AFL++](important_changes.md). +For releases, please see the [Releases](https://github.com/AFLplusplus/AFLplusplus/releases) tab. +Also take a look at the list of [important changes in AFL++](important_changes.md). \ No newline at end of file diff --git a/docs/fuzzing_binary-only_targets.md b/docs/fuzzing_binary-only_targets.md index 8b3bbeff..ea262f6e 100644 --- a/docs/fuzzing_binary-only_targets.md +++ b/docs/fuzzing_binary-only_targets.md @@ -72,7 +72,7 @@ cd unicorn_mode If the goal is to fuzz a dynamic library then there are two options available. For both you need to write a small harness that loads and calls the library. Then you fuzz this with either frida_mode or qemu_mode, and either use -`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES` +`AFL_INST_LIBS=1` or `AFL_QEMU/FRIDA_INST_RANGES`. Another, less precise and slower option is using ptrace with debugger interrupt instrumentation: [utils/afl_untracer/README.md](../utils/afl_untracer/README.md). diff --git a/docs/fuzzing_expert.md b/docs/fuzzing_expert.md index ef3f8a4e..96193f88 100644 --- a/docs/fuzzing_expert.md +++ b/docs/fuzzing_expert.md @@ -625,4 +625,4 @@ This is basically all you need to know to professionally run fuzzing campaigns. If you want to know more, the tons of texts in [docs/](./) will have you covered. Note that there are also a lot of tools out there that help fuzzing with AFL++ -(some might be deprecated or unsupported), see [tools.md](tools.md). +(some might be deprecated or unsupported), see [tools.md](tools.md). \ No newline at end of file diff --git a/docs/life_pro_tips.md b/docs/life_pro_tips.md index 13ffcea0..e79bcafa 100644 --- a/docs/life_pro_tips.md +++ b/docs/life_pro_tips.md @@ -27,16 +27,16 @@ Run the bundled `afl-plot` utility to generate browser-friendly graphs. Check out the `fuzzer_stats` file in the AFL output dir or try `afl-whatsup`. ## Puzzled by something showing up in red or purple in the AFL UI? -It could be important - consult docs/status_screen.md right away! +It could be important - consult [status_screen.md](status_screen.md) right away! ## Know your target? Convert it to persistent mode for a huge performance gain! -Consult section #5 in README.llvm.md for tips. +Consult section #5 in [instrumentation/README.llvm.md](../instrumentation/README.llvm.md) for tips. ## Using clang? -Check out instrumentation/ for a faster alternative to afl-gcc! +Check out [instrumentation/](../instrumentation/) for a faster alternative to afl-gcc! ## Did you know that AFL can fuzz closed-source or cross-platform binaries? -Check out qemu_mode/README.md and unicorn_mode/README.md for more. +Check out [qemu_mode/README.md](../qemu_mode/README.md) and [unicorn_mode/README.md](../unicorn_mode/README.md) for more. ## Did you know that afl-fuzz can minimize any test case for you? Try the bundled `afl-tmin` tool - and get small repro files fast! @@ -46,7 +46,7 @@ Try the bundled `afl-tmin` tool - and get small repro files fast! ## Trouble dealing with a machine uprising? Relax, we've all been there. -Find essential survival tips at http://lcamtuf.coredump.cx/prep/. +Find essential survival tips at [http://lcamtuf.coredump.cx/prep/](http://lcamtuf.coredump.cx/prep/). ## Want to automatically spot non-crashing memory handling bugs? @@ -54,7 +54,7 @@ Try running an AFL-generated corpus through ASAN, MSAN, or Valgrind. ## Good selection of input files is critical to a successful fuzzing job. -See docs/perf_tips.md for pro tips. +See [perf_tips.md](perf_tips.md) for pro tips. ## You can improve the odds of automatically spotting stack corruption issues. @@ -70,18 +70,18 @@ sanity-checking `assert()` / `abort()` statements to effortlessly catch logic bu ## Hey kid... pssst... want to figure out how AFL really works? -Check out docs/technical_details.md for all the gory details in one place! +Check out [technical_details.md](technical_details.md) for all the gory details in one place! ## There's a ton of third-party helper tools designed to work with AFL! -Be sure to check out docs/sister_projects.md before writing your own. +Be sure to check out [sister_projects.md](sister_projects.md) before writing your own. ## Need to fuzz the command-line arguments of a particular program? -You can find a simple solution in utils/argv_fuzzing. +You can find a simple solution in [utils/argv_fuzzing](../utils/argv_fuzzing/). ## Attacking a format that uses checksums? Remove the checksum-checking code or use a postprocessor! -See `afl_custom_post_process` in custom_mutators/examples/example.c for more. +See `afl_custom_post_process` in [custom_mutators/examples/example.c](../custom_mutators/examples/example.c) for more. diff --git a/docs/triaging_crashes.md b/docs/triaging_crashes.md index b0015c90..21ccecaa 100644 --- a/docs/triaging_crashes.md +++ b/docs/triaging_crashes.md @@ -43,4 +43,4 @@ file, attempts to sequentially flip bytes, and observes the behavior of the tested program. It then color-codes the input based on which sections appear to be critical, and which are not; while not bulletproof, it can often offer quick insights into complex file formats. More info about its operation can be found -near the end of [technical_details.md](technical_details.md). +near the end of [technical_details.md](technical_details.md). \ No newline at end of file |