19 lines
315 B
Markdown
19 lines
315 B
Markdown
|
# QEMU persistent hook example
|
||
|
|
|
||
|
|
Compile the test binary and the library:
|
||
|
|
|
||
|
|
```
|
||
|
|
make
|
||
|
|
```
|
||
|
|
|
||
|
|
Fuzz with:
|
||
|
|
|
||
|
|
```
|
||
|
|
export AFL_QEMU_PERSISTENT_ADDR=0x$(nm test | grep "T target_func" | awk '{print $1}')
|
||
|
|
export AFL_QEMU_PERSISTENT_HOOK=./read_into_rdi.so
|
||
|
|
|
||
|
|
mkdir in
|
||
|
|
echo 0000 > in/in
|
||
|
|
|
||
|
|
../../afl-fuzz -Q -i in -o out -- ./test
|
||
|
|
```
|