How to use AFL for Mobile applications

google / AFL

american fuzzy lop - a security-oriented fuzzer

https://lcamtuf.coredump.cx/afl/

Apache License 2.0

3.67k stars 631 forks source link

How to use AFL for Mobile applications #122

Closed vaibhavp2 closed 4 years ago

vaibhavp2 commented 4 years ago

Can you please direct to a good tutorial that would let us know how we can use and configure this tool for a mobile application testing ? I have gone through the readme file but didn't quite understand how can we use for mobile application.

Thanks!

Dor1s commented 4 years ago

Hi @vaibhavp2,

It might be useful to learn more about fuzzing first. You can check https://github.com/google/fuzzing, http://tutorial.libfuzzer.info/, https://github.com/Dor1s/libfuzzer-workshop or any other blogs / videos on the topic. That would give you a better understanding of what's fuzzable and what's not. "Fuzzing a mobile application" sounds very vague. I'd suggest to better understand / identify the actual target you're going to fuzz and go from there.