kAFL

kAFL copied to clipboard

Problems booting on macOS

2

Has anyone got this working with the latest macOS? I have found to run macOS on QEMU I need to add several CPU feature flags including the `invtsc` flag, however...

brainrecursion

Can I modify the QEMU-PT code to get the mtc and tsc information？

1

After using this project， I can get the TNT and the TIP information， but I also need the time information，so can I ask for how to modify the code to...

yyl321

Why don't you maintain this project any more?

14

Such a powerful project. And I have found and fixed several bugs, do you mind that I maintain it in my forked repository?

Bl1nnnk

Execute loader binary as root but VM didn't freeze

3

Hi, have followed the steps provided to configure kAFL. However, I have encounter problems. Current Host Architecture: Ubuntu 16.04 64-bit On the "executing loader binary" step, I execute loader binary...

cirrus528

qemu.py sends an extra 'R' message during initial handshake and soft reload. This releases the virtual machine that is waiting on hypercall_next_payload before qemu.py writes to the payload buffer. As...

timnewsham

Write_virtual_memory function at memory_access.c failed

2

Hi Sergey and mxmssh ， Thank you for the great tool & research! I am trying to do fuzzing of kafl_vuln_test using kAFL but I have a problem. I managed...

u609

I installed on ubuntu 16.04.3 server and followed the startup instructions in the readme to load the vulnerable test driver in the guest and start fuzzing it. After about three...

timnewsham

Could you provide agents for fuzzing windows?

1

Hi, First of all, thanks for your work, kAFL is very impressive. Could you provide the agents you used to fuzz windows? These could be good examples for starters.

alzkejalzkje

Includes a makefile and compiled binary for the vulnerable windows driver. Users might have to change their include directories but it should at least put them in the right direction.

MatthewTingum

In mapserver.py lz4 module wasn't properly invoked and caused the crash of the program when handling a kernel panic event. I fixed the bug following lz4 documentation (https://python-lz4.readthedocs.io/en/stable/quickstart.html#simple-usage). pyno

pyno