Skip to content

Releases: tum-i4/macke

Complete compositional greybox fuzzing

24 Jul 07:52
9ba4b69
Compare
Choose a tag to compare

Several major and minor additions have been made in this version. Some of the major ones are

  1. Isolated functions can be fuzzed, instead of only being symbolically executed. Added support for afl-clang-fast through LLVM 6.0.
  2. Isolated functions can be flipped too! This means fast switching between symbolic execution and fuzzing whenever one of the techniques saturates. Also supported through KLEE and afl-clang-fast.
  3. All pre-analysis operations are carried out at the LLVM bitcode level, using several opt passes. This means that the distance metrics (for targeted symbolic execution, e.g.) are much more accurate now and the search for function entry points happens much faster. This also means that a lot less "garbage" is generated and stored as intermediate analysis files.

Source-code-licking

04 Aug 13:44
Compare
Choose a tag to compare
Source-code-licking Pre-release
Pre-release

This is a preview version of Macke with source code walking, code-based distance metrics, and all amateur stuff thrown in to create what is, possibly, the first ever generalized compositional analysis tool using symbolic execution.

Have fun breaking things!