parent
10bb65a253
commit
f1f095a5ae
@ -0,0 +1,38 @@
|
||||
Here's a quick overview of the stuff you can find in this directory:
|
||||
|
||||
- argv_fuzzing - a simple wrapper to allow cmdline to be fuzzed
|
||||
(e.g., to test setuid programs).
|
||||
|
||||
- asan_cgroups - a contributed script to simplify fuzzing ASAN
|
||||
binaries with robust memory limits on Linux.
|
||||
|
||||
- bash_shellshock - a simple hack used to find a bunch of
|
||||
post-Shellshock bugs in bash.
|
||||
|
||||
- canvas_harness - a test harness used to find browser bugs with a
|
||||
corpus generated using simple image parsing
|
||||
binaries & afl-fuzz.
|
||||
|
||||
- clang_asm_normalize - a script that makes it easy to instrument
|
||||
hand-written assembly, provided that you have clang.
|
||||
|
||||
- crash_triage - a very rudimentary example of how to annotate crashes
|
||||
with additional gdb metadata.
|
||||
|
||||
- distributed_fuzzing - a sample script for synchronizing fuzzer instances
|
||||
across multiple machines (see parallel_fuzzing.txt).
|
||||
|
||||
- libpng_no_checksum - a sample patch for removing CRC checks in libpng.
|
||||
|
||||
- persistent_demo - an example of how to use the LLVM persistent process
|
||||
mode to speed up certain fuzzing jobs.
|
||||
|
||||
- post_library - an example of how to build postprocessors for AFL.
|
||||
|
||||
Note that the minimize_corpus.sh tool has graduated from the experimental/
|
||||
directory and is now available as ../afl-cmin. The LLVM mode has likewise
|
||||
graduated to ../llvm_mode/*.
|
||||
|
||||
Most of the tools in this directory are meant chiefly as examples that need to
|
||||
be tweaked for your specific needs. They come with some basic documentation,
|
||||
but are not necessarily production-grade.
|
Loading…
Reference in new issue