For those interested in coverage-guided fuzzing, I've just released CmpCov - an instrumentation module for clang/SanitizerCoverage, which breaks down CMP/strcmp()/etc. into bytes and writes the extra coverage data to standard .sancov files. Get it here:https://github.com/googleprojectzero/CompareCoverage …
for a writeup on a fuzzer using a very similar idea: https://www.syssec.ruhr-uni-bochum.de/research/publications/redqueen/ …
-
-
Nice work! Just to inform potential readers - I understand the authors' wish to test Intel PT mode with honggfuzz, in order to compare it with kAFL - though its IPT mode is way inferior to the standard edge/mem/cmp instrumentation, hence poorer results here IMO.
Hvala. Twitter će to iskoristiti za poboljšanje vaše vremenske crte. PoništiPoništi
-
Čini se da učitavanje traje već neko vrijeme.
Twitter je možda preopterećen ili ima kratkotrajnih poteškoća u radu. Pokušajte ponovno ili potražite dodatne informacije u odjeljku Status Twittera.