2020-11-17 20:09:52 +01:00
..
2020-09-09 17:49:43 +02:00
2020-09-09 17:49:43 +02:00

custum mutator: symcc

This uses the excellent symcc to find new paths into the target.

To use this custom mutator follow the steps in the symcc repository https://github.com/eurecom-s3/symcc/ on how to build symcc and how to instrument a target binary (the same target that you are fuzzing).

The target program compiled with symcc has to be pointed to with the SYMCC_TARGET environment variable.

just type make to build this custom mutator.

SYMCC_TARGET=/prg/to/symcc/compiled/target AFL_CUSTOM_MUTATOR_LIBRARY=custom_mutators/symcc/symcc-mutator.so afl-fuzz ...