我有一些github,我正在尝试使用AFL运行。代码:https://github.com/karimmd/CScanner/tree/cfe7d08bf46b1eed0443f9e27bc089d68a830a45
我想运行这个项目,找出漏洞。我把github上的所有文件都放在一个code文件夹里,所以文件结构是CScanner-master/code/这里的所有文件。我在终端上使用这个命令:
hemlatamahaur@Hemlatas-MacBook-Pro desktop % afl-fuzz -i CScanner-master -o code ./input-testcode.c
afl-fuzz 2.56b by <lcamtuf@google.com>
[+] You have 4 CPU cores and 2 runnable tasks (utilization: 50%).
[+] Try parallel jobs - see /usr/local/Cellar/afl-fuzz/2.57b/share/doc/afl/parallel_fuzzing.txt.
[*] Setting up output directories...
[+] Output directory exists but deemed OK to reuse.
[*] Deleting old session data...
[+] Output dir cleanup successful.
[*] Scanning 'CScanner-master'...
[+] No auto-generated dictionary tokens to reuse.
[*] Creating hard links for all input files...
[*] Validating target binary...
[-] PROGRAM ABORT : Program './input-testcode.c' not found or not executable
Location : check_binary(), afl-fuzz.c:6873它一直说没有作为input-testcode.c文件
我是AFL的新手,所以我可能做错了。如何使用AFL运行此代码来查找漏洞。任何帮助都是非常感谢的。
发布于 2020-11-30 18:43:10
您必须首先使用afl-clang构建代码
afl-clang
$ afl-clang input-testcode.c -o input-testcode。
然后:
$ afl-fuzz -i CScanner-master -o code ./input-testcode。
我希望它能在可执行文件上运行。
https://stackoverflow.com/questions/64620065
复制相似问题