News for hackers. Stuff that matters.

A comment on Afl-fuzz: making up grammar with a dictionary in hand.

Re:Afl-fuzz: making up grammar with a dictionary in hand by TheLoneWolfling on Wednesday April 15, 2015 @11:43AM (#9381699)
Someone should combine AFL with an x86 code emulator. Sure, it'll be slow. But it'll be better than nothing. (And you'd be fuzzing the emulator at the same time!)

(An interesting alternative route would be to rewrite the binary in-place, using something like PEBIL.)

[ Parent | on HN ]
Re:Afl-fuzz: making up grammar with a dictionary in hand by thoughtpolice on Wednesday April 15, 2015 @12:17PM (#9381999)
AFL already has support for using QEMU for blackbox binary instrumentation. The NixOS packages (maintained by me) automatically have it supported out of the box. There is also 3rd party support for using Dyninst to statically instrument binaries in place (which is faster than QEMU and looks more robust than PEBIL): https://github.com/vrtadmin/moflow/tree/master/afl-dyninst
[ Parent | on HN ]