search

pr0v3rbs / FirmAE

Towards Large-Scale Emulation of IoT Firmware for Dynamic Analysis
MIT License
610 stars 117 forks source link

how to change the fuzzer? #37

Open linzc21 opened 2 years ago

linzc21 commented 2 years ago

If i want to change the fuzzer to AFL, do you know how to do it? Thanks a lot!

pr0v3rbs commented 2 years ago

Sorry for the late. Currently, FirmAE does not support AFL.

AFL supports two-mode: source code, and binary mode. If you have a source code, then compile with the AFL and just run. However, there is only a binary, then you can perform the binary-only fuzzing, maybe you can run the binary with an abstracted library such as libnvram.so in the AFL QEMU mode.

linzc21 commented 2 years ago

Sorry for the late. Currently, FirmAE does not support AFL.

AFL supports two-mode: source code, and binary mode. If you have a source code, then compile with the AFL and just run. However, there is only a binary, then you can perform the binary-only fuzzing, maybe you can run the binary with an abstracted library such as libnvram.so in the AFL QEMU mode.

Sorry for the late. Currently, FirmAE does not support AFL.

AFL supports two-mode: source code, and binary mode. If you have a source code, then compile with the AFL and just run. However, there is only a binary, then you can perform the binary-only fuzzing, maybe you can run the binary with an abstracted library such as libnvram.so in the AFL QEMU mode.

OK~~ Thanks