AFL初学测试的几个问题的解决

曾经终败给现在 2022-09-17 04:18 174阅读 0赞

小白初学AFL(American Fuzzy Lop)

[小白初学AFL(American Fuzzy Lop)\_读书笔记-CSDN博客有幸从一位师哥那里知道这个软件，但是由于实习刚刚结束，终于有时间一探当前最为强大而有效的漏洞挖掘技术。首先我的电脑系统是WINDOWS10，而AFL支持的是Linux系统，当然大家如果不想安装双系统或者是虚拟机，可以下载WINAFL：下载地址我正好想更熟悉Linux系统就下了个虚拟机，开始了我的探索旅程。安装AFL在指定目录下检查LLVM和CLANG是否安装：sudo apt-get i...![favicon32.ico][]https://blog.csdn.net/weixin\_39448417/article/details/99703723][AFL_American Fuzzy Lop_-CSDN_WINDOWS10_AFL_Linux_WINAFL_Linux_AFL_LLVM_CLANG_sudo apt-get i..._favicon32.ico_https_blog.csdn.net_weixin_39448417_article_details_99703723]

在执行sudo make install的失败

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zu254K56Zu25LiA_size_18_color_FFFFFF_t_70_g_se_x_16][]

提醒错误如上。

ommand 'afl' not found的错误。最后发现afl -fuzz多了个空格去掉后执行成功。

在执行afl-fuzz -i testcase -o output ./afl\_test又出错了。

又去借鉴文章

[AFL从入门到放弃\_47大宝贝的博客-CSDN博客AFL-Fuzz工具学习AFL-Fuzz 模糊测试工具学习AFL初探安装AFL以及相关工具AFL安装llvm+clang安装开始第一次AFL-FuzzAFL-Fuzz 模糊测试工具学习AFL初探afl-fuzz全称American Fuzzy Loop，是一款特别强大的Fuzzing工具。Fuzzing是指模糊测试，Fuzzing起源很早，其思想是通过自动化产生大量的无目的输入来对目标系统进行测试。afl也是根据这一基本原理，再结合几位大佬的巧妙的构思而产生。其具体的原理、fork策略、变异策略有空的![favicon32.ico][]https://blog.csdn.net/weixin\_41013492/article/details/107712623][AFL_47_-CSDN_AFL-Fuzz_AFL-Fuzz _AFL_AFL_AFL_llvm_clang_AFL-FuzzAFL-Fuzz _AFL_afl-fuzz_American Fuzzy Loop_Fuzzing_Fuzzing_Fuzzing_afl_fork_favicon32.ico_https_blog.csdn.net_weixin_41013492_article_details_107712623]

afl-fuzz -i in -o out ./test的指令也发生了同样的错误。

est@ubuntu:~/AFL/AFLTest$ sudo afl-fuzz -i in -o out ./test 
    afl-fuzz 2.52b by <lcamtuf@google.com>
    [+] You have 4 CPU cores and 3 runnable tasks (utilization: 75%).
    [+] Try parallel jobs - see /usr/local/share/doc/afl/parallel_fuzzing.txt.
    [*] Checking CPU core loadout...
    [+] Found a free CPU core, binding to #0.
    [*] Checking core_pattern...
    
    [-] Hmm, your system is configured to send core dump notifications to an
        external utility. This will cause issues: there will be an extended delay
        between stumbling upon a crash and having this information relayed to the
        fuzzer via the standard waitpid() API.
    
        To avoid having crashes misinterpreted as timeouts, please log in as root
        and temporarily modify /proc/sys/kernel/core_pattern, like so:
    
        echo core >/proc/sys/kernel/core_pattern
    
    [-] PROGRAM ABORT : Pipe at the beginning of 'core_pattern'
             Location : check_crash_handling(), afl-fuzz.c:7275
    
    test@ubuntu:~/AFL/AFLTest$

对于该问题在下面文章帮助下完成了。

# Linux下安装AFL && 报错“Pipe at the beginning of ‘core\_pattern’“解决方案 #

[Linux下安装AFL && 报错“Pipe at the beginning of ‘core\_pattern’“解决方案\_若九的博客-CSDN博客Linux下安装AFL && 报错"Pipe at the beginning of ‘core\_pattern’"解决方案安装报错解决方案博主在Ubuntu虚拟机里安装的AFL，版本是Ubuntu 18.04.1。安装（1）首先下载最新版AFLwget https://lcamtuf.coredump.cx/afl/releases/afl-latest.tgz（2）下载后解压tar -zxvf afl-latest.tgz（3）随后编译cd afl-2.52bm![favicon32.ico][]https://blog.csdn.net/weixin\_45225566/article/details/115877331][Linux_AFL _ _Pipe at the beginning of _core_pattern_-CSDN_Linux_AFL _ _Pipe at the beginning of _core_pattern_Ubuntu_AFL_Ubuntu 18.04.1_1_AFLwget https_lcamtuf.coredump.cx_afl_releases_afl-latest.tgz_2_tar -zxvf afl-latest.tgz_3_cd afl-2.52bm_favicon32.ico_https_blog.csdn.net_weixin_45225566_article_details_115877331]

![watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zu254K56Zu25LiA_size_20_color_FFFFFF_t_70_g_se_x_16][]

[AFL-FUZZ使用笔记（1）\_我不是哈哈镜的博客-CSDN博客\_afl-fuzz一，AFL简介AFL（American Fuzzy Lop）是一款基于覆盖引导（Coverage-guided）的模糊测试工具，它通过记录输入样本的代码覆盖率，从而调整输入样本以提高覆盖率，增加发现漏洞的概率。①从源码编译程序时进行插桩，以记录代码覆盖率（Code Coverage）；②选择一些输入文件，作为初始测试集加入输入队列（queue）；③将队列中的文件按一定的策略进行“突变”；④如果经过变异文件更新了覆盖范围，则将其保留添加到队列中;⑤上述过程会一直循环进行，期间触发了crash的![favicon32.ico][]https://blog.csdn.net/qq\_42896005/article/details/108886195][AFL-FUZZ_1_-CSDN_afl-fuzz_AFL_AFL_American Fuzzy Lop_Coverage-guided_Code Coverage_queue_crash_favicon32.ico_https_blog.csdn.net_qq_42896005_article_details_108886195]可以更加深入的了解

[afl-fuzz技术初探 - M4x - 博客园afl-fuzz技术初探![favicon.svg][]https://www.cnblogs.com/WangAoBo/p/8280352.html][afl-fuzz_ - M4x - _afl-fuzz_favicon.svg_https_www.cnblogs.com_WangAoBo_p_8280352.html]

[favicon32.ico]: /images/20220828/e6f17f7b40094ebea1320fed80d550b4.png
[AFL_American Fuzzy Lop_-CSDN_WINDOWS10_AFL_Linux_WINAFL_Linux_AFL_LLVM_CLANG_sudo apt-get i..._favicon32.ico_https_blog.csdn.net_weixin_39448417_article_details_99703723]: https://blog.csdn.net/weixin_39448417/article/details/99703723
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zu254K56Zu25LiA_size_18_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/1b0123c3e3244fc0b4cbc71ce531d3d9.png
[AFL_47_-CSDN_AFL-Fuzz_AFL-Fuzz _AFL_AFL_AFL_llvm_clang_AFL-FuzzAFL-Fuzz _AFL_afl-fuzz_American Fuzzy Loop_Fuzzing_Fuzzing_Fuzzing_afl_fork_favicon32.ico_https_blog.csdn.net_weixin_41013492_article_details_107712623]: https://blog.csdn.net/weixin_41013492/article/details/107712623
[Linux_AFL _ _Pipe at the beginning of _core_pattern_-CSDN_Linux_AFL _ _Pipe at the beginning of _core_pattern_Ubuntu_AFL_Ubuntu 18.04.1_1_AFLwget https_lcamtuf.coredump.cx_afl_releases_afl-latest.tgz_2_tar -zxvf afl-latest.tgz_3_cd afl-2.52bm_favicon32.ico_https_blog.csdn.net_weixin_45225566_article_details_115877331]: https://blog.csdn.net/weixin_45225566/article/details/115877331
[watermark_type_ZHJvaWRzYW5zZmFsbGJhY2s_shadow_50_text_Q1NETiBA6Zu254K56Zu25LiA_size_20_color_FFFFFF_t_70_g_se_x_16]: /images/20220828/afa08340bdf24a64b93dcc66755dd4ef.png
[AFL-FUZZ_1_-CSDN_afl-fuzz_AFL_AFL_American Fuzzy Lop_Coverage-guided_Code Coverage_queue_crash_favicon32.ico_https_blog.csdn.net_qq_42896005_article_details_108886195]: https://blog.csdn.net/qq_42896005/article/details/108886195
[favicon.svg]: /images/20220828/f1c411c887da4ae687de994e488f45d0.png
[afl-fuzz_ - M4x - _afl-fuzz_favicon.svg_https_www.cnblogs.com_WangAoBo_p_8280352.html]: https://www.cnblogs.com/WangAoBo/p/8280352.html