Andrea Fioraldi

Nobody uses Metasploit for exploit development during CTFs.

OOB read in main:150

1

```c file_size = filestatus.st_size; file_contents = (char*)malloc(filestatus.st_size); if ( file_contents == NULL) { fprintf(stderr, "Memory error: unable to allocate %d bytes\n", file_size); return 1; } fp = fopen(filename, "rt"); if...

Question about cull_queue()

1

Hi, I can't fully understand your algorithm for the selection of favored testcases. In cull_queue I read: ```c if (dsf_enabled) { for (i = 0; i < dsf_len_actual; i++) {...

Report a Trophy

20

Comment here if you found bugs using AFL++ and want to be listed in the trophies section. The trophies section is on the main page of the website: https://aflplus.plus/#trophies

add a checkbox for LAZY_SOLVES in the explorer prompt

Seems that the Makefile related to Juliet is wrong, is for LAVA-M https://github.com/HexHive/retrowrite/blob/master/tests/juliet/Makefile In addition, counting the testcases in Juliet (from https://github.com/arichardson/juliet-test-suite-c) for CWE 121 122 124 126 127 are...

Local experiments timeouts

16

I'm running some local bug experiments and I noticed that fuzzbench reports some bugs while AFL++ didn't find any crashes (looking at results/fuzzer-log.txt). What is the explanation for that? Aren't...

Feature proposal: FuzzBench aware fuzzers

1

Would be cool to have an API that fuzzers can use to report stats to FuzzBench. Fuzzers should modify their code to enable more insightful evaluations (like https://hexgolems.com/2020/08/on-measuring-and-visualizing-fuzzer-performance/) like coverage...