shellphish / fuzzer

A Python interface to AFL, allowing for easy injection of testcases and other functionality.
BSD 2-Clause "Simplified" License
638 stars 130 forks source link

Input binary #37

Closed Elothis closed 5 years ago

Elothis commented 5 years ago

Hey,

Im currently looking into using Driller via this python wrapper, and cannot quite answer the following question from just the readme:

What kind of binary has to be specified via the command line for it to work? Is it just the normally compiled binary (standard gcc/g++) and AFL then works via qemu mode on it, or does it have to be instrumented and compiled with the AFL compiler (afl-cc)?

Thanks :)

zardus commented 5 years ago

It's the former, but keep in mind that angr's environment model is ... lacking, so if your binary makes complex syscalls (with a very loose definition of complex), there will be dragons.

On Fri, Dec 21, 2018 at 4:46 AM Elothis notifications@github.com wrote:

Hey,

Im currently looking into using Driller via this python wrapper, and cannot quite answer the following question from just the readme:

What kind of binary has to be specified via the command line for it to work? Is it just the normally compiled binary (standard gcc/g++) and AFL then works via qemu mode on it, or does it have to be instrumented and compiled with the AFL compiler (afl-cc)?

Thanks :)

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/shellphish/fuzzer/issues/37, or mute the thread https://github.com/notifications/unsubscribe-auth/ADSzl6yN-WTZCYmLerUG9zWW5_xNxzTeks5u7MovgaJpZM4Zd3EC .

Elothis commented 5 years ago

Thanks!