fuzzah / fuzzaide

collection of helper tools for fuzzing

fuzzaide

collection of helper tools for fuzzing

tools

Fuzzing automator fuzzman, WinAFL and Application Verifier crashes minimizer appverif-minimize.py, unique files extractor dupmanage and other tools useful in daily fuzzing tasks. Python 3 compatible.
Visit tools directory for more information.

Note: the last working Python 2 version is in the py2 branch, and the py2_no_setup branch has tools in their single-file form, which require no installation. For both the minimal python version is 2.6. These are not supported and only kept here for ancient systems with no updates available.

libs

Short descriptions are given below.
Visit libs directory for more info.

libexit

LD_PRELOAD this simple lib to force application exit after specified time with specified exit code.
Used to exit closed source binaries running in infinite loop after feeding them fuzzed input with tools like AFL.

libpatchfuzz

EXAMPLE / TEMPLATE library for fuzzing closed-source binaries with use of hooking and patching techniques.
Idea: LD_PRELOAD to your tested app, hook code that acquires input buffer data, replace data in buffer with data from stdin.

fuzzaide's Issues

python installation is broken

After pip install . this happens:

$ fuzzman -h
Traceback (most recent call last):
File "/home/user/git/fuzzaide/.venv/bin/fuzzman", line 5, in <module>
from fuzzaide.tools.fuzzman.fuzzman import main
ModuleNotFoundError: No module named 'fuzzaide.tools'

Temporary workaround is to install the package in editable mode:

python3 -m venv .venv
. .venv/bin/activate
pip install -e .[all]

[fuzzman] Fix possible division by zero

Hi!
When fuzzing starts slowly (with many inputs) and fuzzer_stats may contain 0 in paths, there is a chance to zero division
So fix is in this commit

[fuzzman] Fix fuzzer_stat entries

In AFLplusplus 4.00c+ versions were renamed several UI and fuzzer_stat entries
So fix is in this commit

Не заводится main instance с опцией по умолчанию exploit

afl-fuzz++4.06a based on afl by Michal Zalewski and a large online community

[-] PROGRAM ABORT : -M is compatible only with fast and explore -p power schedules
         Location : main(), src/afl-fuzz.c:1307

Опция здесь