unicorefuzz
unicorefuzz copied to clipboard
Fuzzing the Kernel Using Unicornafl and AFL++
``` *] Spinning up the fork server... [-] Hmm, looks like the target binary terminated before we could complete a handshake with the injected code. Perhaps there is a horrible...
Right now, the avatar² thread used for `ucf attach` waits for gdb in a busy loop, at least on linux. This is a bug in the gdb.py (or whatsitsname) dependency...
Meh, turns out Avatar2 does not fully(?) support aarch64, so we don't either. Let's throw some PRs against them.
Right now, there is no way to spot out-of-bounds reads or writes easily (unless the kernel has been compiled with KASAN or similar). A custom allocator similar to [`libdislocator.so`](https://github.com/vanhauser-thc/AFLplusplus/blob/f7a400878a4b979513de50e50ec599a3376216af/libdislocator/libdislocator.so.c) would...
Hello, I'm experimenting with unicorefuzz. This issue occurred while running setup.sh script: ``` .... [+] Building unicorn_mode ================================================= UnicornAFL build script ================================================= [*] Performing basic sanity checks... [-] Error: Python...