https://github.com/0xricksanchez/docker_fuzz
GH repo for the docker fuzz container that contains all necessary tools to get started with binary fuzzing and debugging
https://github.com/0xricksanchez/docker_fuzz
afl-fuzz fuzzing gdb honggfuzz libfuzzer pwndbg radamsa rr triage
Last synced: over 1 year ago
JSON representation
GH repo for the docker fuzz container that contains all necessary tools to get started with binary fuzzing and debugging
- Host: GitHub
- URL: https://github.com/0xricksanchez/docker_fuzz
- Owner: 0xricksanchez
- License: mit
- Created: 2021-11-18T15:17:24.000Z (over 4 years ago)
- Default Branch: main
- Last Pushed: 2022-02-02T22:28:40.000Z (over 4 years ago)
- Last Synced: 2025-01-16T04:12:12.124Z (over 1 year ago)
- Topics: afl-fuzz, fuzzing, gdb, honggfuzz, libfuzzer, pwndbg, radamsa, rr, triage
- Language: Dockerfile
- Homepage:
- Size: 9.77 KB
- Stars: 7
- Watchers: 3
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
# README
This is an all purpose test container for all things fuzzing/debugging.
It has a bunch of tools installed to get you started.
List of tools:
* AFL++ (full)
* AFL-cov
* libfuzzer
* honggfuzz
* radamsa
* gdb(-multiarch) with pwndbg
* rr
* crashwalk
* exploitable
* zsh
* hexyl
* ripgrep
* bat
* httpie
* exposed ssh server
* go
* python3
* valgrind
* strace, ltrace, uftrace, lcov, gcov, llvm-cov
Just build and run it as you would any other container
```bash
docker built -t bfuzz .
docker run -it --cap-add=SYS_PTRACE --security-opt seccomp=unconfined bfuzz
// alternatively if you want to mount a fuzz target into the container run
docker run -itv "/host_dir:/container_dir" --cap-add=SYS_PTRACE --security-opt seccomp=unconfined bfuzz
```
or you can even pull the container directly from docker hub:
```bash
docker pull 0x434b/bfuzz
docker run -itv "$(pwd)/host_dir:/container_dir" --cap-add=SYS_PTRACE --security-opt seccomp=unconfined 0x434b:bfuzz
```
The extra flags `--cap-add=SYS_PTRACE --security-opt seccomp=unconfined` are needed by the *rr* debugger to work inside a docker container.