diff options
| -rw-r--r-- | README.md | 8 | ||||
| -rw-r--r-- | loftix/fuzzing.scm | 12 |
2 files changed, 16 insertions, 4 deletions
diff --git a/README.md b/README.md index 7ec37fc..eb35d2e 100644 --- a/README.md +++ b/README.md @@ -24,7 +24,8 @@ Then run `guix pull`. ### Fuzzing -- [afl-dyninst]: Dyninst integration for AFL++ +- [afl-dyninst]: [Dyninst] integration for [AFL++] +- [evocatio]: Bug analyzer for bug capability discovery ### Patching @@ -36,9 +37,10 @@ Then run `guix pull`. - [taosc]: Makeshift binary patch generator [Guix channel]: https://guix.gnu.org/manual/devel/en/html_node/Channels.html -[AFLRun]: https://trong.loang.net/~cnx/afl++/log?h=run -[AFL++]: https://github.com/AFLplusplus/AFLplusplus [afl-dyninst]: https://trong.loang.net/~cnx/afl-dyninst/about +[Dyninst]: https://github.com/dyninst/dyninst +[AFL++]: https://aflplus.plus +[evocatio]: https://github.com/HexHive/Evocatio [e9patch]: https://github.com/GJDuck/e9patch [python-pacfix]: https://github.com/hsh814/pacfix-python [taosc]: https://trong.loang.net/~cnx/taosc/about diff --git a/loftix/fuzzing.scm b/loftix/fuzzing.scm index 0e953c1..9cdb4fc 100644 --- a/loftix/fuzzing.scm +++ b/loftix/fuzzing.scm @@ -99,4 +99,14 @@ (chmod file #o755))) '("calculate_severity_score" "gen_raw_data_for_cve"))))) ;; Tests are run during 'install phase - (delete 'check))))))) + (delete 'check)))) + (home-page "https://github.com/HexHive/Evocatio") + (description + "Evocatio is a bug analyzer built on top of AFL++ and AddressSanitizer. +It automatically discovers a bug's capabilities: analyzing a crashing test case +(i.e., an input exposing a bug) to understand the full extent +of how an attacker can exploit a bug. + +Evocatio leverages a capability-guided fuzzer to efficiently uncover +new bug capabilities (rather than only generating a single crashing test case +for a given bug, as a traditional greybox fuzzer does).")))) |