+ What is the difference between AFL and AFL++?
AFL++ is a superior fork to Google's AFL - more speed, more and better mutations, more and better instrumentation, custom module support, etc. @@ -23,13 +23,13 @@ If you find an interesting or important question missing, submit it via
+ Where can I find tutorials?
We compiled a list of tutorials and exercises, see [tutorials.md](tutorials.md).
+ What is an "edge"?
A program contains `functions`, `functions` contain the compiled machine code.
The compiled machine code in a `function` can be in a single or many `basic blocks`.
@@ -77,7 +77,7 @@ If you find an interesting or important question missing, submit it via
## Targets
+
AFL++ is a great fuzzer if you have the source code available.
@@ -87,7 +87,7 @@ If you find an interesting or important question missing, submit it via
+
The short answer is - you cannot, at least not "out of the box".
@@ -95,7 +95,7 @@ If you find an interesting or important question missing, submit it via
+
Not all GUI programs are suitable for fuzzing. If the GUI program can read the fuzz data from a file without needing any user interaction, then it would be suitable for fuzzing.
@@ -105,13 +105,13 @@ If you find an interesting or important question missing, submit it via
## Performance
+
There are a few things you can do to improve the fuzzing speed, see [best_practices.md#improving-speed](best_practices.md#improving-speed).
+
Stability is measured by how many percent of the edges in the target are "stable".
Sending the same input again and again should take the exact same path through the target every time.
@@ -131,7 +131,7 @@ If you find an interesting or important question missing, submit it via
## Troubleshooting
+
If you see this kind of error when trying to instrument a target with afl-cc/afl-clang-fast/afl-clang-lto:
--
cgit 1.4.1
How can I fuzz a binary-only target?
How can I fuzz a binary-only target?
How can I fuzz a network service?
How can I fuzz a network service?
How can I fuzz a GUI program?
How can I fuzz a GUI program?
How can I improve the fuzzing speed?
How can I improve the fuzzing speed?
Why is my stability below 100%?
Why is my stability below 100%?
I got a weird compile error from clang.
I got a weird compile error from clang.