E9AFL --- Binary AFL
E9AFL inserts American Fuzzy Lop
(AFL) instrumentation into x86_64 Linux binaries.
This allows binaries to be fuzzed without the need for recompilation.
E9AFL uses E9Patch to insert the AFL instrumentation via static binary rewriting.
Building
To build E9AFL, simply run the build.sh script:
$ ./build.sh
Usage
First, install afl-fuzz:
$ sudo apt-get install afl
To use E9AFL, simply run the command:
$ ./e9afl /path/to/binary
This will generate an AFL-instrumented binary.afl which can be
used with afl-fuzz.
See the example below.
Example
To fuzz the binutils readelf program:
$ ./e9afl readelf
$ mkdir -p input
$ mkdir -p output
$ head -n 1 `which ls` > input/exe
$ afl-fuzz -i input/ -o output/ -- ./readelf.afl -a @@
If all goes well the output should look something like this:
Bugs
Please report bugs here.
License
GLPv3