Watch the recording of my #ekoparty talk "Advanced #Fuzzing with #LibAFL" here:
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
December 10, 2024 at 6:01 AM
Watch the recording of my #ekoparty talk "Advanced #Fuzzing with #LibAFL" here:
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
youtu.be/FI7C37lz4Rg?...
Thanks @fede-k.bsky.social for this amazing event!
We've released #LibAFL 0.14 with an afl-fuzz rewrite in LibAFL, better QEMU, FRIDA scripting, intel_pt tracing support and more!
Check it out:
github.com/AFLplusplus/...
Check it out:
github.com/AFLplusplus/...
Release 0.14.0 · AFLplusplus/LibAFL
Highlights
libafl-fuzz (afl-fuzz clone in LibAFL) almost fully-featured (GSoC of @R9295)
libafl-pt New crate to use IntelPt for coverage tracing (GSoC of @Marcondiro)
LibAFL_FRIDA: Added scripting...
github.com
November 14, 2024 at 5:11 PM
We've released #LibAFL 0.14 with an afl-fuzz rewrite in LibAFL, better QEMU, FRIDA scripting, intel_pt tracing support and more!
Check it out:
github.com/AFLplusplus/...
Check it out:
github.com/AFLplusplus/...
🚨 LibAFL 0.15.2 🚨
- Rust 2024 edition
- LibAFL_Unicorn
- Use LibAFL rand types for other crates
- Allow logging to StatsD
- LibAFL_QEMU updates like binary-only ASan in Rust 🦀🦀🦀, inputs via StdIn, better snapshots
And so much more:
github.com/AFLplusplus/...
#LibAFL #Fuzzing #AFLplusplus
- Rust 2024 edition
- LibAFL_Unicorn
- Use LibAFL rand types for other crates
- Allow logging to StatsD
- LibAFL_QEMU updates like binary-only ASan in Rust 🦀🦀🦀, inputs via StdIn, better snapshots
And so much more:
github.com/AFLplusplus/...
#LibAFL #Fuzzing #AFLplusplus
Release 0.15.2 · AFLplusplus/LibAFL
What's Changed
Add statistics. Move client stats from Monitor to EventManager by @Evian-Zhang in #2940
Update MIGRATION by @Evian-Zhang in #2947
Move to just by @tokatoka in #2924
Small improveme...
github.com
March 31, 2025 at 4:08 PM
🚨 LibAFL 0.15.2 🚨
- Rust 2024 edition
- LibAFL_Unicorn
- Use LibAFL rand types for other crates
- Allow logging to StatsD
- LibAFL_QEMU updates like binary-only ASan in Rust 🦀🦀🦀, inputs via StdIn, better snapshots
And so much more:
github.com/AFLplusplus/...
#LibAFL #Fuzzing #AFLplusplus
- Rust 2024 edition
- LibAFL_Unicorn
- Use LibAFL rand types for other crates
- Allow logging to StatsD
- LibAFL_QEMU updates like binary-only ASan in Rust 🦀🦀🦀, inputs via StdIn, better snapshots
And so much more:
github.com/AFLplusplus/...
#LibAFL #Fuzzing #AFLplusplus
Using #LibAFL to fuzz @golang.org binaries with a proper modern fuzzer 📈📈
Super cool stuff by @srlabs.bsky.social
www.srlabs.de/blog-post/go...
Super cool stuff by @srlabs.bsky.social
www.srlabs.de/blog-post/go...
GoLibAFL — Fuzzing Go binaries using LibAFL
Nils Ollrogge, Bruno Produit
www.srlabs.de
April 16, 2025 at 12:28 PM
Using #LibAFL to fuzz @golang.org binaries with a proper modern fuzzer 📈📈
Super cool stuff by @srlabs.bsky.social
www.srlabs.de/blog-post/go...
Super cool stuff by @srlabs.bsky.social
www.srlabs.de/blog-post/go...
LibAFL 0.15.4 has just been released 🎉
Of the 30 Contributers for this release, almost half are new faces <3
github.com/AFLplusplus/...
#Fuzzing #LibAFL #AFLplusplus
Of the 30 Contributers for this release, almost half are new faces <3
github.com/AFLplusplus/...
#Fuzzing #LibAFL #AFLplusplus
Release 0.15.4 · AFLplusplus/LibAFL
Highlights
DumpTargetBytesToDiskStage can to dump complex inputs to disk as bytes
CmpLog implementation is now consistent with AFL++ to share targets back and forth
Updated and fixed ForkserverByt...
github.com
November 12, 2025 at 3:31 PM
LibAFL 0.15.4 has just been released 🎉
Of the 30 Contributers for this release, almost half are new faces <3
github.com/AFLplusplus/...
#Fuzzing #LibAFL #AFLplusplus
Of the 30 Contributers for this release, almost half are new faces <3
github.com/AFLplusplus/...
#Fuzzing #LibAFL #AFLplusplus
You can now replace libfuzzer with #LibAFL on Windows, thanks to @novafacing.bsky.social
github.com/AFLplusplus/...
github.com/AFLplusplus/...
Windows Support for LibAFL-LibFuzzer by novafacing · Pull Request #3130 · AFLplusplus/LibAFL
Description
Support for Windows with LibAFL-LibFuzzer. This is a draft with a couple issues still persisting.
No maps available when running fuzzer
Checklist
I have run ./scripts/precommit.sh ...
github.com
May 20, 2025 at 11:37 PM
You can now replace libfuzzer with #LibAFL on Windows, thanks to @novafacing.bsky.social
github.com/AFLplusplus/...
github.com/AFLplusplus/...
libAFL is a beast.
it has so many settings to tweak, different modes to select and the code can be quite scary at first.
but writing a target-specific custom fuzzer is super powerful!
to get started, Trail of Bits just published a nice primer:
appsec.guide/docs/fuzzing...
it has so many settings to tweak, different modes to select and the code can be quite scary at first.
but writing a target-specific custom fuzzer is super powerful!
to get started, Trail of Bits just published a nice primer:
appsec.guide/docs/fuzzing...
LibAFL
LibAFL # The LibAFL fuzzer implements features from AFL-based fuzzers like AFL++. Similarly to AFL++, LibAFL provides better fuzzing performance and more advanced features over libFuzzer. However, wit...
appsec.guide
March 12, 2025 at 3:41 PM
libAFL is a beast.
it has so many settings to tweak, different modes to select and the code can be quite scary at first.
but writing a target-specific custom fuzzer is super powerful!
to get started, Trail of Bits just published a nice primer:
appsec.guide/docs/fuzzing...
it has so many settings to tweak, different modes to select and the code can be quite scary at first.
but writing a target-specific custom fuzzer is super powerful!
to get started, Trail of Bits just published a nice primer:
appsec.guide/docs/fuzzing...
Updating from #LibAFL 0.10 to 0.15 doesn't look too bad, the API is getting more and more stable 📈
github.com/epi052/fuzzi...
github.com/epi052/fuzzi...
Update libafl to 15.0 by epi052 · Pull Request #21 · epi052/fuzzing-101-solutions
Companion repository to the Fuzzing101 with LibAFL series of blog posts. - Update libafl to 15.0 by epi052 · Pull Request #21 · epi052/fuzzing-101-solutions
github.com
January 31, 2025 at 12:59 PM
Updating from #LibAFL 0.10 to 0.15 doesn't look too bad, the API is getting more and more stable 📈
github.com/epi052/fuzzi...
github.com/epi052/fuzzi...
A fun way to learn how to do custom components for #LibAFL by solving games 🐰🐰🐰
github.com/addisoncrump...
github.com/addisoncrump...
GitHub - addisoncrump/parking-game-fuzzer: Learn to LibAFL with parking-game puzzles.
Learn to LibAFL with parking-game puzzles. Contribute to addisoncrump/parking-game-fuzzer development by creating an account on GitHub.
github.com
June 30, 2025 at 12:43 PM
A fun way to learn how to do custom components for #LibAFL by solving games 🐰🐰🐰
github.com/addisoncrump...
github.com/addisoncrump...
LibAFL docs that I wrote during my time at Trail of Bits are released now!! Check it out to learn some best practices including tips and tricks! appsec.guide/docs/fuzzing...
LibAFL
LibAFL # The LibAFL fuzzer implements features from AFL-based fuzzers like AFL++. Similarly to AFL++, LibAFL provides better fuzzing performance and more advanced features over libFuzzer. However, wit...
appsec.guide
March 13, 2025 at 9:13 AM
LibAFL docs that I wrote during my time at Trail of Bits are released now!! Check it out to learn some best practices including tips and tricks! appsec.guide/docs/fuzzing...
This is so cool: The LibAFL_QEMU ASan implementation was ported to rust
github.com/AFLplusplus/...
#LibAFL #QEMU #ASan #Rust
github.com/AFLplusplus/...
#LibAFL #QEMU #ASan #Rust
Librasan by WorksButNotTested · Pull Request #3023 · AFLplusplus/LibAFL
Implementation of ASAN target side components in rust.
The implementation sits alongside the existing libqasan (although that could be withdrawn in future if we are happy with it). It is selected ...
github.com
March 10, 2025 at 4:29 PM
This is so cool: The LibAFL_QEMU ASan implementation was ported to rust
github.com/AFLplusplus/...
#LibAFL #QEMU #ASan #Rust
github.com/AFLplusplus/...
#LibAFL #QEMU #ASan #Rust
Guess who just released #LibAFL 0.15.3?
That's right, you all did! (thank you☺️)
Highlights:
- better forkserver
- scriptable Lua mutations
- SIMD performance in stable rust
- CmpLog and RISC-V for LibAFL_Unicorn
- TMin for LibAFL_QEMU
- Updated Sugar for easy fuzzing
github.com/AFLplusplus/...
That's right, you all did! (thank you☺️)
Highlights:
- better forkserver
- scriptable Lua mutations
- SIMD performance in stable rust
- CmpLog and RISC-V for LibAFL_Unicorn
- TMin for LibAFL_QEMU
- Updated Sugar for easy fuzzing
github.com/AFLplusplus/...
Release 0.15.3 · AFLplusplus/LibAFL
Highlights
New AFL++ Forkserver support in libafl_targets, new forkserver features
Introduced LuaMutator, scriptable mutators
SIMD performance enhancements for MapFeedback in stable rust (was nigh...
github.com
May 30, 2025 at 12:07 PM
Guess who just released #LibAFL 0.15.3?
That's right, you all did! (thank you☺️)
Highlights:
- better forkserver
- scriptable Lua mutations
- SIMD performance in stable rust
- CmpLog and RISC-V for LibAFL_Unicorn
- TMin for LibAFL_QEMU
- Updated Sugar for easy fuzzing
github.com/AFLplusplus/...
That's right, you all did! (thank you☺️)
Highlights:
- better forkserver
- scriptable Lua mutations
- SIMD performance in stable rust
- CmpLog and RISC-V for LibAFL_Unicorn
- TMin for LibAFL_QEMU
- Updated Sugar for easy fuzzing
github.com/AFLplusplus/...
3 part series on fuzzing the GPS service daemon (psd) using LibAFL
Part 1: xchglabs.com/blog/fuzzing...
Part 2: xchglabs.com/blog/fuzzing...
Part 3: xchglabs.com/blog/fuzzing...
#infosec
Part 1: xchglabs.com/blog/fuzzing...
Part 2: xchglabs.com/blog/fuzzing...
Part 3: xchglabs.com/blog/fuzzing...
#infosec
June 15, 2026 at 8:51 PM
3 part series on fuzzing the GPS service daemon (psd) using LibAFL
Part 1: xchglabs.com/blog/fuzzing...
Part 2: xchglabs.com/blog/fuzzing...
Part 3: xchglabs.com/blog/fuzzing...
#infosec
Part 1: xchglabs.com/blog/fuzzing...
Part 2: xchglabs.com/blog/fuzzing...
Part 3: xchglabs.com/blog/fuzzing...
#infosec
Oh look, new version of #LibAFL !!
With 0.16.0 we moved non-fuzzer parts into own crates.
Crates for pinning cores, rngs, collecing BSODs, and generally helpful rust stuff.
Have fun using them for other projects <3
A lot of actual #fuzzer improvements, too, read more at
github.com/AFLplusplus/...
With 0.16.0 we moved non-fuzzer parts into own crates.
Crates for pinning cores, rngs, collecing BSODs, and generally helpful rust stuff.
Have fun using them for other projects <3
A lot of actual #fuzzer improvements, too, read more at
github.com/AFLplusplus/...
Release 0.16.0 · AFLplusplus/LibAFL
Highlights
Split up underlying functionality into multiple reusable crates!
build_id2
core_affinity2
exceptional
fast_rands
ll_mp
minibsod
no_std_time
nonzero_macros
ownedref
serde_anymap
shmem_p...
github.com
August 11, 2026 at 2:19 AM
Oh look, new version of #LibAFL !!
With 0.16.0 we moved non-fuzzer parts into own crates.
Crates for pinning cores, rngs, collecing BSODs, and generally helpful rust stuff.
Have fun using them for other projects <3
A lot of actual #fuzzer improvements, too, read more at
github.com/AFLplusplus/...
With 0.16.0 we moved non-fuzzer parts into own crates.
Crates for pinning cores, rngs, collecing BSODs, and generally helpful rust stuff.
Have fun using them for other projects <3
A lot of actual #fuzzer improvements, too, read more at
github.com/AFLplusplus/...
github.com/TNO-S3/Wuppi...
This one does Web API fuzzing using OpenAPI specs and does coverage guided fuzzing with LibAFL (but no automatic inference)
This one does Web API fuzzing using OpenAPI specs and does coverage guided fuzzing with LibAFL (but no automatic inference)
GitHub - TNO-S3/WuppieFuzz: A coverage-guided REST API fuzzer developed on top of LibAFL
A coverage-guided REST API fuzzer developed on top of LibAFL - TNO-S3/WuppieFuzz
github.com
April 18, 2025 at 4:44 AM
github.com/TNO-S3/Wuppi...
This one does Web API fuzzing using OpenAPI specs and does coverage guided fuzzing with LibAFL (but no automatic inference)
This one does Web API fuzzing using OpenAPI specs and does coverage guided fuzzing with LibAFL (but no automatic inference)
Also, #LibAFL 📈📈
Super cool to see people build ontop of Nyx: neodyme.io/en/blog/hype...
Introducing HyperHook: A harnessing framework for Nyx
In this post, we introduce HyperHook, a harnessing framework for snapshot-based fuzzing for user-space applications using Nyx. HyperHook simplifies guest-to-host communication and automates repetitive...
neodyme.io
February 6, 2025 at 2:08 AM
Also, #LibAFL 📈📈
I hear some people are delighted about our special 🍍🍕 mode today in #AFLPlusPlus and #LibAFL
This makes #fuzzing so much more tasty
github.com/AFLplusplus/...
github.com/AFLplusplus/...
This makes #fuzzing so much more tasty
github.com/AFLplusplus/...
github.com/AFLplusplus/...
Add missing mode to LibAFL by domenukk · Pull Request #3708 · AFLplusplus/LibAFL
Description
This adds support of a missing mode available in AFL++, see AFLplusplus/AFLplusplus#1374 for details.
github.com
April 1, 2026 at 11:15 AM
I hear some people are delighted about our special 🍍🍕 mode today in #AFLPlusPlus and #LibAFL
This makes #fuzzing so much more tasty
github.com/AFLplusplus/...
github.com/AFLplusplus/...
This makes #fuzzing so much more tasty
github.com/AFLplusplus/...
github.com/AFLplusplus/...
You should also check out this talk from @stokfredrik.bsky.social and @joohoi.bsky.social on Bitflips: www.youtube.com/watch?v=7f7K...
This talk from @joohoi.bsky.social on ffuf: www.youtube.com/watch?v=GaQs...
This talk on LibAFL from @dmnk.bsky.social: www.youtube.com/watch?v=FI7C...
This talk from @joohoi.bsky.social on ffuf: www.youtube.com/watch?v=GaQs...
This talk on LibAFL from @dmnk.bsky.social: www.youtube.com/watch?v=FI7C...
Advanced Fuzzing With LibAFL - Dominik Maier - Ekoparty 2024
YouTube video by Ekoparty Security Conference
www.youtube.com
December 10, 2024 at 10:56 PM
You should also check out this talk from @stokfredrik.bsky.social and @joohoi.bsky.social on Bitflips: www.youtube.com/watch?v=7f7K...
This talk from @joohoi.bsky.social on ffuf: www.youtube.com/watch?v=GaQs...
This talk on LibAFL from @dmnk.bsky.social: www.youtube.com/watch?v=FI7C...
This talk from @joohoi.bsky.social on ffuf: www.youtube.com/watch?v=GaQs...
This talk on LibAFL from @dmnk.bsky.social: www.youtube.com/watch?v=FI7C...