From 33ddf6ea0e090ec2ef18dfa7c53b4dfe8130de26 Mon Sep 17 00:00:00 2001 From: van Hauser Date: Fri, 1 May 2020 17:07:44 +0200 Subject: add ghidra script and workaround ghidra/linux/ida weirdness --- examples/afl_untracer/README.md | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'examples/afl_untracer/README.md') diff --git a/examples/afl_untracer/README.md b/examples/afl_untracer/README.md index d3af0ceb..4ff96423 100644 --- a/examples/afl_untracer/README.md +++ b/examples/afl_untracer/README.md @@ -10,6 +10,10 @@ or cmplog. Read and modify afl-untracer.c then `make` and use it as the afl-fuzz target (or even remote via afl-network-proxy). +To generate the `patches.txt` file for your target library use the +`ida_get_patchpoints.py` script for IDA Pro or +`ghidra_get_patchpoints.java` for Ghidra. + This idea is based on [UnTracer](https://github.com/FoRTE-Research/UnTracer-AFL) and modified by [Trapfuzz](https://github.com/googleprojectzero/p0tools/tree/master/TrapFuzz). This implementation is slower because the traps are not patched out with each -- cgit 1.4.1