bakabtw/Cool-Y.github.io
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Site updated: 2019-07-09 16:58:58

Browse Source
This commit is contained in:
Cool-Y 2019-07-09 16:59:11 +08:00
parent aa080f69a2
commit 7dc690ad31
80 changed files with 154 additions and 392 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
2000/01/01/hello-world/index.html
View File

@ -651,7 +651,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2018/11/16/BIBA访问控制模型实现(python)/index.html
View File

@ -839,7 +839,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2018/12/15/miio-control/index.html
View File

@ -741,7 +741,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2018/12/23/基于规则引擎发现IOT设备/index.html
View File

@ -741,7 +741,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2018/12/25/TCPDUMP拒绝服务攻击漏洞/index.html
View File

@ -746,7 +746,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/01/16/wifi半双工侧信道攻击学习笔记/index.html
View File

@ -869,7 +869,7 @@ Server -------wire----------|
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/02/22/qq数据库的加密解密/index.html
View File

@ -718,7 +718,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/03/16/小米固件工具mkxqimage/index.html
View File

@ -725,7 +725,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/03/23/auto-send-WX/index.html
View File

@ -735,7 +735,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/03/25/Samba-CVE/index.html
View File

@ -760,7 +760,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/03/28/逆向工程实验/index.html
View File

@ -863,7 +863,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/04/15/Caving-db-storage/index.html
View File

@ -784,7 +784,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/04/21/XIAOMI-UPnP/index.html
View File

@ -907,7 +907,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/05/13/PE-file/index.html
View File

@ -827,7 +827,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
2019/05/14/pack-and-unpack/index.html
View File

@ -749,7 +749,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

330
2019/07/01/AFL-first-learn/index.html
View File

File diff suppressed because one or more lines are too long

34
2019/07/09/afl-first-try/index.html
View File

@ -82,15 +82,15 @@
<meta name="description" content="这篇文章是对afl的简单使用，可大致分为黑盒测试和白盒测试两个部分。白盒测试从对目标程序的插桩编译开始，然后使用fuzzer对其模糊测试发现崩溃，最后对测试的代码覆盖率进行评估。黑盒测试则演示得较简略。参考：https://paper.seebug.org/841/#_1 部署afl 123456&amp;gt; wget http://lcamtuf.coredump.cx/afl/releases/">
<meta name="keywords" content="AFL,模糊测试">
<meta property="og:type" content="article">
<meta property="og:title" content="AFL初次实践">
<meta property="og:title" content="AFL-爱之初体验">
<meta property="og:url" content="https://cool-y.github.io/2019/07/09/afl-first-try/index.html">
<meta property="og:site_name" content="混元霹雳手">
<meta property="og:description" content="这篇文章是对afl的简单使用，可大致分为黑盒测试和白盒测试两个部分。白盒测试从对目标程序的插桩编译开始，然后使用fuzzer对其模糊测试发现崩溃，最后对测试的代码覆盖率进行评估。黑盒测试则演示得较简略。参考：https://paper.seebug.org/841/#_1 部署afl 123456&amp;gt; wget http://lcamtuf.coredump.cx/afl/releases/">
<meta property="og:locale" content="zh-Hans">
<meta property="og:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1562570048/afl/1.png">
<meta property="og:updated_time" content="2019-07-09T06:47:08.044Z">
<meta property="og:updated_time" content="2019-07-09T08:57:59.215Z">
<meta name="twitter:card" content="summary">
<meta name="twitter:title" content="AFL初次实践">
<meta name="twitter:title" content="AFL-爱之初体验">
<meta name="twitter:description" content="这篇文章是对afl的简单使用，可大致分为黑盒测试和白盒测试两个部分。白盒测试从对目标程序的插桩编译开始，然后使用fuzzer对其模糊测试发现崩溃，最后对测试的代码覆盖率进行评估。黑盒测试则演示得较简略。参考：https://paper.seebug.org/841/#_1 部署afl 123456&amp;gt; wget http://lcamtuf.coredump.cx/afl/releases/">
<meta name="twitter:image" content="https://res.cloudinary.com/dozyfkbg3/image/upload/v1562570048/afl/1.png">
@ -128,7 +128,7 @@
<title>AFL初次实践 | 混元霹雳手</title>
<title>AFL-爱之初体验 | 混元霹雳手</title>
@ -324,7 +324,7 @@
<h1 class="post-title" itemprop="name headline">AFL初次实践</h1>
<h1 class="post-title" itemprop="name headline">AFL-爱之初体验</h1>
<div class="post-meta">
@ -386,7 +386,7 @@
<span id="/2019/07/09/afl-first-try/" class="leancloud_visitors" data-flag-title="AFL初次实践">
<span id="/2019/07/09/afl-first-try/" class="leancloud_visitors" data-flag-title="AFL-爱之初体验">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
@ -454,12 +454,12 @@
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br></pre></td><td class="code"><pre><span class="line">&gt; $ CPU_TARGET=x86_64 ./build_qemu_support.sh</span><br><span class="line">&gt; [+] Build process successful!</span><br><span class="line">&gt; [*] Copying binary...</span><br><span class="line">&gt; -rwxr-xr-x 1 han han 10972920 7月 9 10:43 ../afl-qemu-trace</span><br><span class="line">&gt; [+] Successfully created &apos;../afl-qemu-trace&apos;.</span><br><span class="line">&gt; [!] Note: can&apos;t test instrumentation when CPU_TARGET set.</span><br><span class="line">&gt; [+] All set, you can now (hopefully) use the -Q mode in afl-fuzz!</span><br><span class="line">&gt;</span><br></pre></td></tr></table></figure>
</blockquote>
<hr>
<h1 id="白盒测试"><a href="#白盒测试" class="headerlink" title="白盒测试"></a>白盒测试</h1><h2 id="目标程序编译"><a href="#目标程序编译" class="headerlink" title="目标程序编译"></a>目标程序编译</h2><ol>
<h1 id="0x01白盒测试"><a href="#0x01白盒测试" class="headerlink" title="0x01白盒测试"></a>0x01白盒测试</h1><h2 id="目标程序编译"><a href="#目标程序编译" class="headerlink" title="目标程序编译"></a>目标程序编译</h2><ol>
<li><p>源代码</p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br><span class="line">11</span><br><span class="line">12</span><br><span class="line">13</span><br><span class="line">14</span><br></pre></td><td class="code"><pre><span class="line">#undef _FORTIFY_SOURCE</span><br><span class="line">#include &lt;stdio.h&gt;</span><br><span class="line">#include &lt;stdlib.h&gt;</span><br><span class="line">#include &lt;unistd.h&gt;</span><br><span class="line"></span><br><span class="line">void vulnerable_function() &#123;</span><br><span class="line"> char buf[128];</span><br><span class="line"> read(STDIN_FILENO, buf, 256);</span><br><span class="line">&#125;</span><br><span class="line"></span><br><span class="line">int main(int argc, char** argv) &#123;</span><br><span class="line"> vulnerable_function();</span><br><span class="line"> write(STDOUT_FILENO, &quot;Hello, World\n&quot;, 13);</span><br><span class="line">&#125;</span><br></pre></td></tr></table></figure>
</li>
<li><p>gcc编译（不插桩）</p>
<figure class="highlight plain"><figcaption><span>-ftest-coverage</span></figcaption><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br></pre></td><td class="code"><pre><span class="line">$ gcc v1.c -o v1</span><br><span class="line">$ ./v1</span><br><span class="line">what</span><br><span class="line">Hello, World</span><br></pre></td></tr></table></figure>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br></pre></td><td class="code"><pre><span class="line">$ gcc v1.c -o v1</span><br><span class="line">$ ./v1</span><br><span class="line">what</span><br><span class="line">Hello, World</span><br></pre></td></tr></table></figure>
</li>
</ol>
<p>生成v1的目的一是为了和afl-gcc的编译做对比，二是为黑盒测试做铺垫。</p>
@ -509,11 +509,11 @@
<li>plot_data：用于afl-plot绘图。</li>
</ul>
<h2 id="崩溃类型和可利用性"><a href="#崩溃类型和可利用性" class="headerlink" title="崩溃类型和可利用性"></a>崩溃类型和可利用性</h2><ol>
<li>triage_crashes<br>AFL源码的experimental目录中有一个名为triage_crashes.sh的脚本，可以帮助我们触发收集到的crashes。例如下面的例子中，11代表了SIGSEGV信号，有可能是因为缓冲区溢出导致进程引用了无效的内存；06代表了SIGABRT信号，可能是执行了abort\assert函数或double free导致，这些结果可以作为简单的参考。</li>
</ol>
<li><p>triage_crashes<br>AFL源码的experimental目录中有一个名为triage_crashes.sh的脚本，可以帮助我们触发收集到的crashes。例如下面的例子中，11代表了SIGSEGV信号，有可能是因为缓冲区溢出导致进程引用了无效的内存；06代表了SIGABRT信号，可能是执行了abort\assert函数或double free导致，这些结果可以作为简单的参考。</p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br></pre></td><td class="code"><pre><span class="line">$ experimental/crash_triage/triage_crashes.sh ../vuln/out/ ../vuln/v1-afl 2&gt;&amp;1 | grep SIGNAL</span><br><span class="line">+++ ID 000000, SIGNAL 11 +++</span><br></pre></td></tr></table></figure>
<ol start="2">
<li>crashwalk<br>如果你想得到更细致的crashes分类结果，以及导致crashes的具体原因，那么crashwalk就是不错的选择之一。这个工具基于gdb的exploitable插件，安装也相对简单，在ubuntu上，只需要如下几步即可：<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br></pre></td><td class="code"><pre><span class="line">$ apt-get install gdb golang</span><br><span class="line">$ mkdir tools</span><br><span class="line">$ cd tools</span><br><span class="line">$ git clone https://github.com/jfoote/exploitable.git</span><br><span class="line">$ mkdir go</span><br><span class="line">$ export GOPATH=~/tools/go</span><br><span class="line">$ export CW_EXPLOITABLE=~/tools/exploitable/exploitable/exploitable.py</span><br><span class="line">$ go get -u github.com/bnagy/crashwalk/cmd/...</span><br></pre></td></tr></table></figure>
</li>
<li><p>crashwalk<br>如果你想得到更细致的crashes分类结果，以及导致crashes的具体原因，那么crashwalk就是不错的选择之一。这个工具基于gdb的exploitable插件，安装也相对简单，在ubuntu上，只需要如下几步即可：</p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br></pre></td><td class="code"><pre><span class="line">$ apt-get install gdb golang</span><br><span class="line">$ mkdir tools</span><br><span class="line">$ cd tools</span><br><span class="line">$ git clone https://github.com/jfoote/exploitable.git</span><br><span class="line">$ mkdir go</span><br><span class="line">$ export GOPATH=~/tools/go</span><br><span class="line">$ export CW_EXPLOITABLE=~/tools/exploitable/exploitable/exploitable.py</span><br><span class="line">$ go get -u github.com/bnagy/crashwalk/cmd/...</span><br></pre></td></tr></table></figure>
</li>
</ol>
<ul>
@ -524,12 +524,12 @@
</li>
</ol>
<hr>
<h1 id="代码覆盖率及其相关概念"><a href="#代码覆盖率及其相关概念" class="headerlink" title="代码覆盖率及其相关概念"></a>代码覆盖率及其相关概念</h1><blockquote>
<h1 id="0x02代码覆盖率及其相关概念"><a href="#0x02代码覆盖率及其相关概念" class="headerlink" title="0x02代码覆盖率及其相关概念"></a>0x02代码覆盖率及其相关概念</h1><blockquote>
<p>代码覆盖率是模糊测试中一个极其重要的概念，使用代码覆盖率可以评估和改进测试过程，执行到的代码越多，找到bug的可能性就越大，毕竟，在覆盖的代码中并不能100%发现bug，在未覆盖的代码中却是100%找不到任何bug的。<br>代码覆盖率是一种度量代码的覆盖程度的方式，也就是指源代码中的某行代码是否已执行；对二进制程序，还可将此概念理解为汇编代码中的某条指令是否已执行。其计量方式很多，但无论是GCC的GCOV还是LLVM的SanitizerCoverage，都提供函数（function）、基本块（basic-block）、边界（edge）三种级别的覆盖率检测。</p>
</blockquote>
<h2 id="计算代码覆盖率"><a href="#计算代码覆盖率" class="headerlink" title="计算代码覆盖率"></a>计算代码覆盖率</h2><p><strong>GCOV</strong>：插桩生成覆盖率 <strong>LCOV</strong>：图形展示覆盖率 <strong>afl-cov</strong>：调用前两个工具计算afl测试用例的覆盖率</p>
<ol>
<li><p>gcc插桩</p>
<li><p>gcc插桩<br><strong>-fprofile-arcs -ftest-coverage</strong></p>
<figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br></pre></td><td class="code"><pre><span class="line">$ gcc -fprofile-arcs -ftest-coverage ./v1.c -o v1-cov</span><br></pre></td></tr></table></figure>
</li>
<li><p>afl-cov计算之前fuzzer的过程（结束后）</p>
@ -540,7 +540,7 @@
</ol>
<p><img src="https://res.cloudinary.com/dozyfkbg3/image/upload/v1562570048/afl/1.png" alt></p>
<hr>
<h1 id="黑盒测试（使用qemu"><a href="#黑盒测试（使用qemu" class="headerlink" title="黑盒测试（使用qemu"></a>黑盒测试（使用qemu</h1><figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br><span class="line">11</span><br><span class="line">12</span><br><span class="line">13</span><br><span class="line">14</span><br><span class="line">15</span><br><span class="line">16</span><br><span class="line">17</span><br><span class="line">18</span><br><span class="line">19</span><br><span class="line">20</span><br><span class="line">21</span><br><span class="line">22</span><br><span class="line">23</span><br><span class="line">24</span><br><span class="line">25</span><br></pre></td><td class="code"><pre><span class="line">$ ./afl-fuzz -i ../vuln/testcase/ -o ../vuln/outQemu -Q ../vuln/v1</span><br><span class="line">american fuzzy lop 2.52b (v1)</span><br><span class="line"></span><br><span class="line">┌─ process timing ─────────────────────────────────────┬─ overall results ─────┐</span><br><span class="line">│ run time : 0 days, 0 hrs, 0 min, 41 sec │ cycles done : 232 │</span><br><span class="line">│ last new path : none yet (odd, check syntax!) │ total paths : 2 │</span><br><span class="line">│ last uniq crash : 0 days, 0 hrs, 0 min, 41 sec │ uniq crashes : 1 │</span><br><span class="line">│ last uniq hang : none seen yet │ uniq hangs : 0 │</span><br><span class="line">├─ cycle progress ────────────────────┬─ map coverage ─┴───────────────────────┤</span><br><span class="line">│ now processing : 0* (0.00%) │ map density : 0.04% / 0.04% │</span><br><span class="line">│ paths timed out : 0 (0.00%) │ count coverage : 1.00 bits/tuple │</span><br><span class="line">├─ stage progress ────────────────────┼─ findings in depth ────────────────────┤</span><br><span class="line">│ now trying : havoc │ favored paths : 1 (50.00%) │</span><br><span class="line">│ stage execs : 255/256 (99.61%) │ new edges on : 1 (50.00%) │</span><br><span class="line">│ total execs : 121k │ total crashes : 33 (1 unique) │</span><br><span class="line">│ exec speed : 2860/sec │ total tmouts : 0 (0 unique) │</span><br><span class="line">├─ fuzzing strategy yields ───────────┴───────────────┬─ path geometry ────────┤</span><br><span class="line">│ bit flips : 0/56, 0/54, 0/50 │ levels : 1 │</span><br><span class="line">│ byte flips : 0/7, 0/5, 0/1 │ pending : 0 │</span><br><span class="line">│ arithmetics : 0/392, 0/25, 0/0 │ pend fav : 0 │</span><br><span class="line">│ known ints : 0/36, 0/138, 0/44 │ own finds : 0 │</span><br><span class="line">│ dictionary : 0/0, 0/0, 0/0 │ imported : n/a │</span><br><span class="line">│ havoc : 1/120k, 0/0 │ stability : 100.00% │</span><br><span class="line">│ trim : 82.61%/5, 0.00% ├────────────────────────┘</span><br><span class="line">^C────────────────────────────────────────────────────┘ [cpu000:102%]</span><br></pre></td></tr></table></figure>
<h1 id="0x03黑盒测试（使用qemu"><a href="#0x03黑盒测试（使用qemu" class="headerlink" title="0x03黑盒测试（使用qemu"></a>0x03黑盒测试（使用qemu</h1><figure class="highlight plain"><table><tr><td class="gutter"><pre><span class="line">1</span><br><span class="line">2</span><br><span class="line">3</span><br><span class="line">4</span><br><span class="line">5</span><br><span class="line">6</span><br><span class="line">7</span><br><span class="line">8</span><br><span class="line">9</span><br><span class="line">10</span><br><span class="line">11</span><br><span class="line">12</span><br><span class="line">13</span><br><span class="line">14</span><br><span class="line">15</span><br><span class="line">16</span><br><span class="line">17</span><br><span class="line">18</span><br><span class="line">19</span><br><span class="line">20</span><br><span class="line">21</span><br><span class="line">22</span><br><span class="line">23</span><br><span class="line">24</span><br><span class="line">25</span><br></pre></td><td class="code"><pre><span class="line">$ ./afl-fuzz -i ../vuln/testcase/ -o ../vuln/outQemu -Q ../vuln/v1</span><br><span class="line">american fuzzy lop 2.52b (v1)</span><br><span class="line"></span><br><span class="line">┌─ process timing ─────────────────────────────────────┬─ overall results ─────┐</span><br><span class="line">│ run time : 0 days, 0 hrs, 0 min, 41 sec │ cycles done : 232 │</span><br><span class="line">│ last new path : none yet (odd, check syntax!) │ total paths : 2 │</span><br><span class="line">│ last uniq crash : 0 days, 0 hrs, 0 min, 41 sec │ uniq crashes : 1 │</span><br><span class="line">│ last uniq hang : none seen yet │ uniq hangs : 0 │</span><br><span class="line">├─ cycle progress ────────────────────┬─ map coverage ─┴───────────────────────┤</span><br><span class="line">│ now processing : 0* (0.00%) │ map density : 0.04% / 0.04% │</span><br><span class="line">│ paths timed out : 0 (0.00%) │ count coverage : 1.00 bits/tuple │</span><br><span class="line">├─ stage progress ────────────────────┼─ findings in depth ────────────────────┤</span><br><span class="line">│ now trying : havoc │ favored paths : 1 (50.00%) │</span><br><span class="line">│ stage execs : 255/256 (99.61%) │ new edges on : 1 (50.00%) │</span><br><span class="line">│ total execs : 121k │ total crashes : 33 (1 unique) │</span><br><span class="line">│ exec speed : 2860/sec │ total tmouts : 0 (0 unique) │</span><br><span class="line">├─ fuzzing strategy yields ───────────┴───────────────┬─ path geometry ────────┤</span><br><span class="line">│ bit flips : 0/56, 0/54, 0/50 │ levels : 1 │</span><br><span class="line">│ byte flips : 0/7, 0/5, 0/1 │ pending : 0 │</span><br><span class="line">│ arithmetics : 0/392, 0/25, 0/0 │ pend fav : 0 │</span><br><span class="line">│ known ints : 0/36, 0/138, 0/44 │ own finds : 0 │</span><br><span class="line">│ dictionary : 0/0, 0/0, 0/0 │ imported : n/a │</span><br><span class="line">│ havoc : 1/120k, 0/0 │ stability : 100.00% │</span><br><span class="line">│ trim : 82.61%/5, 0.00% ├────────────────────────┘</span><br><span class="line">^C────────────────────────────────────────────────────┘ [cpu000:102%]</span><br></pre></td></tr></table></figure>
<ul>
<li style="list-style: none"><input type="checkbox"> 待完成对黑盒测试原理的分析</li>
</ul>
@ -776,7 +776,7 @@
<div class="post-toc-content"><ol class="nav"><li class="nav-item nav-level-1"><a class="nav-link" href="#白盒测试"><span class="nav-text">白盒测试</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#目标程序编译"><span class="nav-text">目标程序编译</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#测试插桩程序"><span class="nav-text">测试插桩程序</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#执行FUZZER"><span class="nav-text">执行FUZZER</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#afl何时结束"><span class="nav-text">afl何时结束</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#处理输出结果"><span class="nav-text">处理输出结果</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#崩溃类型和可利用性"><span class="nav-text">崩溃类型和可利用性</span></a></li></ol></li><li class="nav-item nav-level-1"><a class="nav-link" href="#代码覆盖率及其相关概念"><span class="nav-text">代码覆盖率及其相关概念</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#计算代码覆盖率"><span class="nav-text">计算代码覆盖率</span></a></li></ol></li><li class="nav-item nav-level-1"><a class="nav-link" href="#黑盒测试（使用qemu"><span class="nav-text">黑盒测试（使用qemu</span></a></li></ol></div>
<div class="post-toc-content"><ol class="nav"><li class="nav-item nav-level-1"><a class="nav-link" href="#0x01白盒测试"><span class="nav-text">0x01白盒测试</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#目标程序编译"><span class="nav-text">目标程序编译</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#测试插桩程序"><span class="nav-text">测试插桩程序</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#执行FUZZER"><span class="nav-text">执行FUZZER</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#afl何时结束"><span class="nav-text">afl何时结束</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#处理输出结果"><span class="nav-text">处理输出结果</span></a></li><li class="nav-item nav-level-2"><a class="nav-link" href="#崩溃类型和可利用性"><span class="nav-text">崩溃类型和可利用性</span></a></li></ol></li><li class="nav-item nav-level-1"><a class="nav-link" href="#0x02代码覆盖率及其相关概念"><span class="nav-text">0x02代码覆盖率及其相关概念</span></a><ol class="nav-child"><li class="nav-item nav-level-2"><a class="nav-link" href="#计算代码覆盖率"><span class="nav-text">计算代码覆盖率</span></a></li></ol></li><li class="nav-item nav-level-1"><a class="nav-link" href="#0x03黑盒测试（使用qemu"><span class="nav-text">0x03黑盒测试（使用qemu</span></a></li></ol></div>
</div>
@ -808,7 +808,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
about/index.html
View File

@ -460,7 +460,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2000/01/index.html
View File

@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2000/index.html
View File

@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2018/11/index.html
View File

@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2018/12/index.html
View File

@ -560,7 +560,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2018/index.html
View File

@ -595,7 +595,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/01/index.html
View File

@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/02/index.html
View File

@ -490,7 +490,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/03/index.html
View File

@ -595,7 +595,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/04/index.html
View File

@ -525,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/05/index.html
View File

@ -525,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

4
archives/2019/07/index.html
View File

@ -325,7 +325,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -525,7 +525,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

4
archives/2019/index.html
View File

@ -325,7 +325,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -809,7 +809,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/2019/page/2/index.html
View File

@ -529,7 +529,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

4
archives/index.html
View File

@ -325,7 +325,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -809,7 +809,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
archives/page/2/index.html
View File

@ -714,7 +714,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
baidusitemap.xml
View File

@ -5,7 +5,7 @@
<lastmod>2019-07-09</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/07/01/AFL-first-learn/</loc>
<lastmod>2019-07-08</lastmod>
<lastmod>2019-07-09</lastmod>
</url> <url>
<loc>https://cool-y.github.io/2019/05/14/pack-and-unpack/</loc>
<lastmod>2019-07-01</lastmod>

2
bookmarks/index.html
View File

@ -512,7 +512,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/IOT/index.html
View File

@ -549,7 +549,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/index.html
View File

@ -462,7 +462,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

4
categories/二进制/index.html
View File

@ -307,7 +307,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -575,7 +575,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/加密解密/index.html
View File

@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/杂七杂八/index.html
View File

@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/理论学习/index.html
View File

@ -471,7 +471,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
categories/顶会论文/index.html
View File

@ -523,7 +523,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

10
index.html
View File

@ -320,7 +320,7 @@
<h1 class="post-title" itemprop="name headline">
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">AFL初次实践</a></h1>
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">AFL-爱之初体验</a></h1>
<div class="post-meta">
@ -372,7 +372,7 @@
<span id="/2019/07/09/afl-first-try/" class="leancloud_visitors" data-flag-title="AFL初次实践">
<span id="/2019/07/09/afl-first-try/" class="leancloud_visitors" data-flag-title="AFL-爱之初体验">
<span class="post-meta-divider">|</span>
<span class="post-meta-item-icon">
<i class="fa fa-eye"></i>
@ -584,7 +584,7 @@
</span>
<span title="字数统计">
11.4k 字
11.7k 字
</span>
@ -598,7 +598,7 @@
</span>
<span title="阅读时长">
42 分钟
44 分钟
</span>
</div>
@ -2321,7 +2321,7 @@ WinDbg
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
page/2/index.html
View File

@ -1730,7 +1730,7 @@ ettercap嗅探智能设备和网关之间的流量sudo ettercap -i ens33 -T -q
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

6
search.xml
View File

File diff suppressed because one or more lines are too long

4
sitemap.xml
View File

@ -4,14 +4,14 @@
<url>
<loc>https://cool-y.github.io/2019/07/09/afl-first-try/</loc>
<lastmod>2019-07-09T06:47:08.044Z</lastmod>
<lastmod>2019-07-09T08:57:59.215Z</lastmod>
</url>
<url>
<loc>https://cool-y.github.io/2019/07/01/AFL-first-learn/</loc>
<lastmod>2019-07-08T06:09:11.627Z</lastmod>
<lastmod>2019-07-09T08:54:33.951Z</lastmod>
</url>

4
tags/AFL/index.html
View File

@ -307,7 +307,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/CVE/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/MiniUPnP/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/PE/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/QQ/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/SSH/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/Samba/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/TCPDUMP/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/USENIX/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/index.html
View File

@ -462,7 +462,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/itchat/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/miio/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/python/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/wifi/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/中间人/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/侧信道攻击/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/取证/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/复原文件/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/密码/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/小米/index.html
View File

@ -522,7 +522,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/微信/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/拒绝服务攻击/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/数据库/index.html
View File

@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/数据挖掘/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/文件格式/index.html
View File

@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/模型实现/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

4
tags/模糊测试/index.html
View File

@ -307,7 +307,7 @@
<a class="post-title-link" href="/2019/07/09/afl-first-try/" itemprop="url">
<span itemprop="name">AFL初次实践</span>
<span itemprop="name">AFL-爱之初体验</span>
</a>
@ -496,7 +496,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/破解/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/自然语言处理/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/访问控制/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/路由器/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/远程执行/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/逆向/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>

2
tags/重放攻击/index.html
View File

@ -470,7 +470,7 @@
<i class="fa fa-area-chart"></i>
</span>
<span title="Site words total count">48k</span>
<span title="Site words total count">48.3k</span>
</div>