FUZZ101

记录学习FUZZ101的学习过程 最近在期末 可能没什么时间更

FUZZ101学习

搭建fuzz

1
2
3
4
5
6
7
8
9
10
11
12
# 相关依赖
sudo apt-get update
sudo apt-get install -y build-essential python3-dev automake git flex bison libglib2.0-dev libpixman-1-dev python3-setuptools
sudo apt-get install -y lld-11 llvm-11 llvm-11-dev clang-11 || sudo apt-get install -y lld llvm llvm-dev clang
sudo apt-get install -y gcc-$(gcc --version|head -n1|sed 's/.* //'|sed 's/\..*//')-plugin-dev libstdc++-$(gcc --version|head -n1|sed 's/.* //'|sed 's/\..*//')-dev

# 搭建 Fuzz
cd $HOME
git clone https://github.com/AFLplusplus/AFLplusplus && cd AFLplusplus
export LLVM_CONFIG="llvm-config-11"
make distrib
sudo make install
1
2
CC=/home/godrun/AFLplusplus/afl-clang-fast CXX=/home/godrun/AFLplusplus/afl-clang-fast++ ./configure --prefix="/home/godrun/fuzz/fuzzing_xpdf/install/"
make
1
afl-fuzz -i /home/godrun/fuzz/fuzzing_xpdf/pdf_examples/ -o /home/godrun/fuzz/fuzzing_xpdf/out/ -s 123 -- /home/godrun/fuzz/fuzzing_xpdf/install/bin/pdftotext @@ /home/godrun/fuzz/fuzzing_xpdf/output
1
/home/godrun/fuzz/fuzzing_xpdf/install/bin/pdftotext  '/home/godrun/fuzz/fuzzing_xpdf/out/default/crashes/id:000000,sig:11,src:002563+002547,time:1577559,execs:1079596,op:splice,rep:8' /home/godrun/fuzz/fuzzing_xpdf/output

FUZZ相关文章

论文阅读] 02.清华张超老师Fuzzing总结 - GreyOne: Discover Vulnerabilities with Data Flow Sensitive Fuzzing - 知乎 (zhihu.com)