AFL++ : Combining Incremental Steps of Fuzzing Research
summary
AFL++ is an open-source rework that bundles state-of-the-art fuzzing patches into one engine, shipping a Custom Mutator API (C and Python) to plug structured mutators, trimming, postprocessing and queue hooks without forking. It supports many backends (QEMU/unicorn, QBDI, gcc/llvm), platforms (Linux, Android, macOS, FreeBSD, etc.), and popular mutators like radamsa; experiments show combining features can dramatically improve or drastically worsen coverage depending on the target, e.g. RedQueen+MOpt helps some binaries and drags others down.
AI-written summary · about
chapters (16)
- 0:00Introduction
- 0:56AFL
- 1:35Fuzzy roadblocks
- 2:22Mutation strategy
- 3:35Problems
- 4:23Cross Comparison
- 5:23MobileQuest
- 5:38Quality of Code
- 6:36Usability
- 7:14Implementation
- 8:55Usability Improvements
- 10:02Supported Platforms
- 10:49Cross Evaluation
- 13:10Future Plans
- 19:25Conclusion
- 19:52Outro
related talks
45mFuzzing with AFL
18mAccelerating Fuzzing through Prefix-Guided Execution
01h 15mMake your programs more reliable with Fuzzing
52mStructure aware fuzzing
58mFuzzing Embedded (Trusted) Operating Systems Using AFL
28mkAFL: Hardware-Assisted Feedback Fuzzing for OS Kernels
32mFuzzing Zephyr Apps - Struggles of Dynamic Analysis on Embedded Applications
33mFuzzing Ruby and C Extensions