3 ms·
To shreds, you say? The author does mention that it's in the experimental stage, but I might make an attempt later just to refresh my AFL knowledge.
by gkhartman 5y ago
To shreds, you say?
The author does mention that it's in the experimental stage, but I might make an attempt later just to refresh my AFL knowledge.
- cozis 5y agoThat sounds fun! Can AFL test network applications without the need to modify their source code? If not, it should be easy to call the parsing routine in a loop using AFL's persistent mode. At this time xHTTP only parses the minimum amount of headers to work, so fuzzing might not find much yet
- gkhartman 5y agoIIRC the AFL docs recommend compile time instrumentation when the source is available. Binary-only fuzzing is possible, but it's a lot slower. My last binary-only attempt was years ago at this point, but I recall it being clunky to configure to the extent that I just dropped it in favor of instrumented source.