https://github.com/anfedotoff/libafl_casr_forserkver_xlnt

https://github.com/anfedotoff/libafl_casr_forserkver_xlnt

Last synced: about 2 months ago
JSON representation

• Host: GitHub
• URL: https://github.com/anfedotoff/libafl_casr_forserkver_xlnt
• Owner: anfedotoff
• License: mit
• Created: 2023-04-13T14:18:11.000Z (almost 2 years ago)
• Default Branch: main
• Last Pushed: 2023-08-04T10:37:51.000Z (over 1 year ago)
• Last Synced: 2023-08-04T11:56:00.951Z (over 1 year ago)
• Language: Rust
• Size: 1.18 MB
• Stars: 2
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

        
# Simple Forkserver Fuzzer with AsanBacktraceObserver (casr feature)

This is a simple example fuzzer based on [LibAFL](https://github.com/AFLplusplus/LibAFL) to fuzz a executable instrumented by afl-cc.

It uses `AsanBacktraceObserver` with [CASR](https://github.com/ispras/casr) for crash deduplication.

## Usage

You can build this example by `cargo build --release`.

This downloads AFLplusplus/AFLplusplus, [xlnt](https://github.com/tfussell/xlnt) and compiles the example harness program in src/harness.cc with afl-cc.

## Run

After you build it you can run

`cp ./target/release/forkserver_simple_xlnt_casr .` to copy the fuzzer into this directory,

and you can run

`taskset -c 1 ./forkserver_simple_xlnt_casr ./target/release/harness ./corpus/ -t 1000` to run the fuzzer.

`taskset` binds this process to a specific core to improve the throughput.