LibAFL

LibAFL copied to clipboard

WIP: Qemu full system mode

6

A working (but unorthodox, as it uses klo routines) QEMU full system fuzzer using LibAFL+kloroutines. It currently supports only aarch64 and a simple interface via `svc #0xaf1` to use multiple...

bitwave

Proposal: replace corpus indices with CorpusIDs

9

This is a work-in-progress PR with my current implementation of `CorpusID` instead of using straight indices for corpus entries. This has the following benefits: 1. IDs are corpus-unique. That means...

Lukas-Dresel

TuiMonitor with SimpleRestartingEventManager breaks the fuzzer

2

When using the TuiMonitor with the SimpleRestartingEventManager the fuzzer breaks. The TuiMonitor only updates the "run time" and nothing else. Also, the queue only fills up but never gets consumed....

TeumessianFox

Pthread introspection hook

9

see #68

fabianfreyer

Implement State save restore to disk on SIGINT to allow to stop and resume a fuzzer

6

We should implement the handler for posix and windows and extend it to work with multiple processes when using a launcher

andreafioraldi

in SimpleRestartingEventManager the execution count should be restored after respawn

5


andreafioraldi

corpus and related search algorithm design support

8

**Is your feature request related to a problem? Please describe.** 1. safe removal from corpus at anytime while consistent with upper level of minimzers and schedulers which tends to keep...

rezer0dai

TuiMonitor eats up wrong configuration

1

When using the fancy TuiMonitor together with Launcher, it's hard/impossible to find misconfigurations like a missing `in` directory. The UI comes up, but the actual fuzzers die immediately. Their output,...

domenukk

LLVM passes are not built on windows now. We need to change libafl_cc to get it working

tokatoka

Currently, the forkserver executor doesn't play nicely with Served ShMem. #623 addresses this for MacOS by hard-coding Unix ShMem. This will, however, fail for Android. As we cannot change the...

domenukk