3 ms·
Afl-fuzz runs a program until main() and then forks it repeatedly. An empty main() can be called at least 10000 times per second this way.
by xuhu 5y ago
Afl-fuzz runs a program until main() and then forks it repeatedly. An empty main() can be called at least 10000 times per second this way.
- xxpor 5y agoWith AFL++ you can even determine exactly where the fork happens: https://github.com/AFLplusplus/AFLplusplus/blob/stable/instrumentation/README.persistent_mode.md#3-deferred-initialization https://github.com/AFLplusplus/AFLplusplus/blob/stable/instr...