0%

Fuzzing

模糊测试

1、编译Peach

1
2
3
./waf configure && \
./waf build && \
./waf install

2、插桩

1
2
3
4
5
6
7
8
9
cd /dev/shm
dd if=/dev/zero bs=10M count=1 of=song
export SHM_ENV_VAR=/dev/shm/song


dd if=/dev/zero bs=10M count=1 of=lucky
export LUCKY_GLOBAL_MMAP_FILE=/dev/shm/lucky

strings ./fftp | grep asan

3、mono

1
export PATH=/opt/mono-4.8/bin:$PATH

4、收集覆盖率

1
2
clang control.c -fPIC -shared -o libcoverage.so
cp libcoverage.so /usr/local/lib/ && ldconfig

5、结束进程

1
2
3
ps aux | grep hello
kill pid
kill -9 pid
------------- Thank you for reading -------------

Title - Artist
0:00