alwin.berger/FRET-LibAFL
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
FRET-LibAFL/fuzzers/baby_fuzzer_nautilus
History
Andrea Fioraldi fdf579bcd5
Bump to 0.9.0 (#946) 
* bump to 0.9.0

* fix libafl_tinyinst

* fix

---------

Co-authored-by: Dominik Maier <domenukk@gmail.com>
2023-01-31 10:42:01 +01:00
..
src
Remodelling Observers/Examples that rely on UB, API cleanups (#950)
2022-12-24 14:20:44 +01:00
.gitignore
Bridge grammartec from Nautilus to libafl (#342)
2021-11-06 02:21:53 +01:00
Cargo.toml
Bump to 0.9.0 (#946)
2023-01-31 10:42:01 +01:00
grammar.json
Bridge grammartec from Nautilus to libafl (#342)
2021-11-06 02:21:53 +01:00
README.md
Add doc for example baby_fuzzer_* (#564)
2022-03-14 19:14:46 +01:00
rust-toolchain
Bridge grammartec from Nautilus to libafl (#342)
2021-11-06 02:21:53 +01:00

README.md

baby nautilus fuzzer

(Nautilus)[https://www.ndss-symposium.org/ndss-paper/nautilus-fishing-for-deep-bugs-with-grammars/] is a coverage-guided and grammar-based fuzzer. It needs to read the mruby's context-free grammar stored in grammar.json. And then use the corresponding feedback, generator, and mutator to fuzz. libafl::mutators::nautilus contains:

NautilusInput,NautilusContext
NautilusChunksMetadata,NautilusFeedback
NautilusGenerator
NautilusRandomMutator,NautilusRecursionMutator,NautilusSpliceMutator