Questions tagged [american-fuzzy-lop]

american fuzzy lop is a security-oriented fuzzer that employs genetic algorithms in order to efficiently increase code coverage of the test cases. Questions using this tag should be about the use of american-fuzzy-lop or the development of code interfacing with it.

Additional reading: https://en.wikipedia.org/wiki/American_fuzzy_lop_(fuzzer)

Project's website: http://lcamtuf.coredump.cx/afl

41 questions
0
votes
0 answers

Not able to Cross-compile and link source code using afl-clang-fast++

I am trying to fuzz a simple C++ code using afl plus plus clang compiler (llvm_mode). I'm able to fuzz the code and generate the ARM object file but it fails while linking. I guess i'm missing some linker options. Any help would be…
0
votes
1 answer

Running AFL-Fuzzer buffer overflow

I am trying to learn about AFL-fuzzer and I have some questions: I saw a video shows that if for instance there are two inputs in the code, so in the test case each line is for each input. Is that correct? Since I want put a full message (for…
Logan
  • 11
  • 3
0
votes
2 answers

AFL hello world example

I'm trying to figure out how to use AFL, but I can't seem to make a simple example running. Here is my C program: #include #include #include #include char *remove_white_space(char *s) { while (s &&…
OrenIshShalom
  • 5,974
  • 9
  • 37
  • 87
0
votes
1 answer

Should I avoid fuzzing the error handling code

Error handling code plays an important role in programming, hence, when I test the program with afl, should I pay attention to the error handling code part, or should I avoid this part from fuzzing.
0
votes
1 answer

Why do not fuzz client

I am currently studying AFL of sorts, I notice that almost all the tutorial about networking fuzzing or protocol fuzzing is mainly testing the server instead of the client(I know that with -f parameter afl can test a client). I wonder if there are…
0
votes
1 answer

Binaries are not executing after AFL installation in qemu mode

I have recently installed AFL and then its qemu mode, for which I required following packages. 'sudo apt-get install libtool automake bison libglib2.0-dev zlib1g-dev' With these packages installed qemu installation worked fine. But after its…
aneela
  • 1,457
  • 3
  • 24
  • 45
0
votes
1 answer

AFL fuzzer program flags

I am trying to fuzz on a program using afl-fuzzer. However, I need the fuzzer to feed the input files to the program with a specific flag (eg. --flag input-file.xxx). Is there a way to do this ? Thank you!
0
votes
1 answer

compile binary with afl-clang-fast with custom LLVM IR passes

How can I use AFL fuzzer's clang frontend for compile time instrumentation with custom LLVM IR passes. I wish to extract the custom IR passes from : https://github.com/obfuscator-llvm/obfuscator/ and use them when compiling with afl-clang-fast to…
Nemo_Sol
  • 352
  • 1
  • 3
  • 17
0
votes
2 answers

American Fuzzy Lop fails with a simple example

I've been trying to use American Fuzzy Lop but I can't make it work with a simple example like this: #include #include int main(int argc, char * argv[]){ char name[10]; if ( argc > 1 ){ strcpy(name, argv[1]); printf("HELLO…
Davidoff
  • 199
  • 2
  • 3
  • 12
0
votes
0 answers

dynamically import a python module from a folder then access its function

I'm trying to dynamically import python files from a directory and then have those functions available to me somehow, such as a list. Currently I'm importing all modules from a parent folder where those modules live that contains an __init__.py file…
Michael
  • 1,577
  • 1
  • 18
  • 33
-1
votes
2 answers

How about Fuzzing a binary by reversing it to source code?

I am researching how to use AFL to fuzz a binary. I know that it is possible to use qemu mode to achieve it. However, using qemu mode really impact the fuzzing performance. Thus, I am wondering that what if I reverse the target binary to C code by…
desionxxx
  • 21
  • 3
1 2
3