From 0a2d9af2a169d02186c0bb3c82dd6b230557a89d Mon Sep 17 00:00:00 2001 From: van Hauser Date: Sun, 21 Jul 2019 23:58:40 +0200 Subject: doc update --- docs/binaryonly_fuzzing.txt | 17 ++++++++++++++++- 1 file changed, 16 insertions(+), 1 deletion(-) (limited to 'docs') diff --git a/docs/binaryonly_fuzzing.txt b/docs/binaryonly_fuzzing.txt index ae5269f0..0fb12b2b 100644 --- a/docs/binaryonly_fuzzing.txt +++ b/docs/binaryonly_fuzzing.txt @@ -12,7 +12,7 @@ The following is a description of how these can be fuzzed with afl++ !!!!! TL;DR: try DYNINST with afl-dyninst. If it produces too many crashes then - use afl -Q qemu_mode. + use afl -Q qemu_mode, or better: use both in parallel !!!!! @@ -111,6 +111,21 @@ Pintool solutions: https://github.com/spinpx/afl_pin_mode <= only old Pintool version supported +Non-AFL solutions +----------------- + +There are many binary-only fuzzing frameworks. Some are great for CTFs but don't +work with large binaries, other are very slow but have good path discovery, +some are very hard to set-up ... + +QSYM: https://github.com/sslab-gatech/qsym +Manticore: https://github.com/trailofbits/manticore +S2E: https://github.com/S2E + + + + That's it! News, corrections, updates? Email vh@thc.org + -- cgit 1.4.1