ExternalVendorCode/AFLplusplus
1
0
Fork 0
mirror of https://github.com/AFLplusplus/AFLplusplus.git synced 2025-06-19 21:13:45 +00:00
Code Issues Packages Projects Releases Wiki Activity

shorten text

Browse Source
This commit is contained in:
vanhauser-thc
2022-11-21 13:28:07 +01:00
parent 6655d66a9b
commit a16726039f
2 changed files with 4 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

25
docs/fuzzing_in_depth.md
View File

@ -900,32 +900,13 @@ then color-codes the input based on which sections appear to be critical and
which are not; while not bulletproof, it can often offer quick insights into which are not; while not bulletproof, it can often offer quick insights into
complex file formats. complex file formats.
`casr-afl` from [CASR](https://github.com/ispras/casr) tools provides a `casr-afl` from [CASR](https://github.com/ispras/casr) tools provides
straightforward CASR integration with AFL++. While walking through afl comfortable triaging for crashes found by AFL++. Reports are clustered and
instances, `casr-afl` generates crash reports depending on target binary. For contain severity and other information.
binary with ASAN `casr-san` is used, otherwise `casr-gdb`. On the next step
report deduplication is done by `casr-cluster`. Finally, reports are triaged
into clusters. Crash reports contain many useful information: severity
(like [exploitable](https://github.com/jfoote/exploitable)), OS and package
versions, command line, stack trace, register values, disassembly, and even
source code fragment where crash appeared.
**NOTE:** `casr-gdb` and `casr-san` should be in PATH to make `casr-afl` work.
Before using casr-afl, please, follow the installation
[guide](https://github.com/ispras/casr#getting-started). Using `casr-afl` is
very simple:
```shell ```shell
casr-afl -i /path/to/afl/out/dir -o /path/to/casr/out/dir casr-afl -i /path/to/afl/out/dir -o /path/to/casr/out/dir
``` ```
Output directory contains subdirectories (cl1...clN) with report clusters. To
view reports you could use `casr-cli` tool:
```shell
casr-cli /path/to/casr/out/dir/cl1/report.casrep
```
## 5. CI fuzzing ## 5. CI fuzzing
Some notes on continuous integration (CI) fuzzing - this fuzzing is different to Some notes on continuous integration (CI) fuzzing - this fuzzing is different to

2
unicorn_mode/unicornafl

Submodule unicorn_mode/unicornafl updated: 0a31c2b28b...6e00ceac6f