After some testing, it looks like the only thing stopping @GrammaTech ddisasm (which lifts binaries and outputs gnu as compat .s files for recompilation) from being a simple backend for AFL is that it outputs the .s in intel syntax and afl-as is tuned for att syntax..
-
Show this thread
-
On the upside, I did get it to successfully decompose libtiff which I recompiled in a working form after adding a version symbol and exporting all symbols as dynamic. Building was relatively smooth, but you need to build souffle from git src on last release tag version
2 replies 0 retweets 3 likesShow this thread -
Replying to @richinseattle
You knowww... LibFuzzer will work on binaries lifted with mcsema?
https://github.com/trailofbits/mcsema/blob/master/docs/UsingLibFuzzer.md …2 replies 0 retweets 3 likes -
Replying to @dguido @richinseattle
Do you know if its compatible with this, or if this could be possible https://saw.galois.com/tutorial.html Binary Equivalence checking using LLVM lifted compared to compiled LLVM, automated through McSema would be very cool!
1 reply 0 retweets 0 likes -
Last time I played with this McSema wasn't as robust, and Fcd didn't play nice when I tried that one later. I just assumed the optimizations required and effort to get close to recompilable was the bottleneck that would eventually get closer. I wasn't worried about modulo names
1 reply 0 retweets 1 like -
Replying to @ReversingWithMe @dguido
I attempted to get mcsema to work on xz and file without libFuzzer and am having issues. Attached commands used to build and gdb output.pic.twitter.com/x3wOJI9NA9
2 replies 0 retweets 1 like
Come join Empire Hacking's #binary-lifting channel and we can help debug it for you: https://empireslacking.herokuapp.com/
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.