InsTrim
The paper: InsTrim: Lightweight Instrumentation for Coverage-guided Fuzzing
Build
Prerequisite
- llvm-8.0-dev
- clang-8.0
- cmake >= 3.2
Make
git clone https://github.com/csienslab/instrim.git
cd instrim
cmake .
make
Patch and build AFL Fuzzer
Run build_afl.sh or
wget http://lcamtuf.coredump.cx/afl/releases/afl-2.52b.tgz
tar -xvf afl-2.52b.tgz
cd afl-2.52b
patch -p1 < ../instrim/afl-fuzzer.patch
make
cd llvm_mode
make
Usage
Setup the environment
export INSTRIM_LIB=[absolute path of instrim/libLLVMInsTrim.so]
Instrument the target program
With Instrim
MARKSET=1 afl-2.52b/afl-clang-fast [compilation options, your target ...]
With Instrim-Approx
MARKSET=1 LOOPHEAD=1 afl-2.52b/afl-clang-fast [compilation options, your target ...]
Skip single block functions
The following is recommendable for C/C++ targets that are not using vtables or similar techniques:
MARKSET=1 SKIPSINGLEBLOCK=1 afl-2.52b/afl-clang-fast [compilation options, your target ...]
Finally
Then you can use AFL with LLVM mode to fuzz those instrumented binaries.
0 Dec 16, 2021
8 Sep 27, 2021
34 Oct 02, 2022
4 Dec 09, 2022
11 Dec 05, 2022
2 Nov 28, 2021
24 May 31, 2022
4 Feb 15, 2022
88 Dec 28, 2022
10 Dec 20, 2022
110 Dec 23, 2022
32 Dec 06, 2022
4.5k Jan 07, 2023
1 Dec 18, 2021
36 Oct 04, 2022
48 Dec 20, 2022
1 Nov 08, 2022
24 May 16, 2022
530 Jan 04, 2023
10 Oct 19, 2022