模糊测试技术综述
一篇论文综述,可以看到近几年的发展。里面的论文只看过Firm-AFL这一篇,感觉综述里也不是概括地很好,应该是由于Firm-AFl本来实现就比较复杂。
以下是相关项目
- afl & afl++
afl 技术白皮书 https://lcamtuf.coredump.cx/afl/technical_details.txt
afl++的git-hub地址https://github.com/AFLplusplus/AFLplusplus
基于qemu和unicorn的Fuzz技术分析 https://www.cnblogs.com/hac425/p/11614235.html
https://blog.csdn.net/wxh0000mm/article/details/108828040 - Triforce AFL
git-hub https://github.com/nccgroup/TriforceAFL - FirmAFL
中文论文https://mp.weixin.qq.com/s/-s5GGA70vcHAVfyz1QeBtQ
git-hub
https://github.com/zyw-200/FirmAFL/blob/master/experimental/post_library/post_library.so.c - AFL-unicorn
简介 https://medium.com/hackernoon/afl-unicorn-fuzzing-arbitrary-binary-code-563ca28936bf - AFL++ with Ghidra Emulator
简介 https://airbus-cyber-security.com/fuzzing-exotic-arch-with-afl-using-ghidra-emulator/
github https://github.com/airbus-cyber/afl_ghidra_emu
https://github.com/airbus-cyber/AFLplusplus-socket-mode - AFL不禁用qemu的chain功能
https://abiondo.me/2018/09/21/improving-afl-qemu-mode/ - libfuzzer
https://llvm.org/docs/LibFuzzer.html - libfuzzer unicorn模式
https://github.com/PAGalaxyLab/uniFuzzer - syz-fuzzer
https://github.com/google/syzkaller
https://xz.aliyun.com/t/5079