Re:American fuzzy lop – a security-oriented fuzzer
by cjbprime on Tuesday January 28, 2020 @01:45PM
(#22172672)
Neat! I hear it's becoming more common to use non-random mutations. Are people using something other than AFL for those, or is there a way to bolt that on to AFL?
[ Parent
| on HN ]
Re:American fuzzy lop – a security-oriented fuzzer
by kodablah on Tuesday January 28, 2020 @02:11PM
(#22172973)
Last I reviewed, the mutations only fell through to "random havoc" after other stages were tried. So for each mutation, there are deterministic bit flips, number adds, "interesting" numbers set, dictionary uses, and only _then_ does it start the random havoc stage on the mutation. So it's not all random and you can start it with whatever value you want via dictionary or other.
(I kinda made a Java version https://github.com/cretz/javan-warty-pig that attempts to mimic this logic)