3 ms·
How hard is it to set up AFL? I’ve never had the opportunity to set up a fuzzer
by klysm 5y ago
How hard is it to set up AFL? I’ve never had the opportunity to set up a fuzzer
- viraptor 5y agoDepends on the app / file format. If you can isolate some trivial behaviour on a single file you may not even need to change the app. For example "casync list --store=/var/lib/backup.castr input.caidx" could maybe be used to fuzz the index reading if it doesn't care about looking into the store immediately. And if it does, you could comment out those parts as needed. You can get very fancy with the process, but you can start with "here's your single valid input sample, go!" Check out https://fuzzing-project.org/tutorial3.html https://fuzzing-project.org/tutorial3.html and the AFL guide.
- klysm 5y agoThanks! I'll be looking at using that for some of our code