- afl官网https://lcamtuf.coredump.cx/afl/
- 如何处理stdin作为输入
A:afl-fuzz命令中不能加@@,源码中可以直接用scanf/cin等,在input文件夹下新建文件给出初始输入
afl-fuzz -i in -o out ./a.out
ref:https://groups.google.com/forum/#!msg/afl-users/m63xfVbhDiM/5TfBNIWWCAAJ
ref:https://groups.google.com/forum/#!topic/afl-users/Milqu8YD_d0
ref:https://stackoverflow.com/questions/32625699/afl-warning-last-new-path-none-yet-odd-check-syntax - 遇到last new path : none yet, odd, check syntax问题
A:可能afl-gcc编译优化了,试着用AFL_DONT_OPTIMIZE=1 afl-gcc 和AFL_SKIP_CPUFREQ=1 afl-fuzz -i in -o out ./a.out
A:还可以尝试扩大内存,afl-fuzz中加-m 300
A:检查是否正确处理问题stdin作为输入
A: 如果是文件作为输入要@@: AFL_SKIP_CPUFREQ=1 afl-fuzz -m 1000 -i testcase -o output ./afl.out @@
A:如果是stdin输入不要@@ :AFL_SKIP_CPUFREQ=1 afl-fuzz -i testcase -o output ./afl.out -m 1000 - ref:https://groups.google.com/forum/#!topic/afl-users/Milqu8YD_d0
ref:https://groups.google.com/forum/#!topic/afl-users/zU5SBlvBabg
ref:https://stackoverflow.com/questions/32625699/afl-warning-last-new-path-none-yet-odd-check-syntax
afl使用常见问题总结
最新推荐文章于 2023-02-23 19:57:45 发布