[fuzzing] code coverage and execution graph

Charles Miller cmiller at securityevaluators.com
Wed Oct 14 13:45:39 UTC 2009


Does this actually work?  I've never used his module, but I tried  
writing my own CPU aided basic block coverage tool a few years ago and  
wasn't happy with the performance (I'm assuming this is what gera's  
module does).  Then again, I'm a sucky developer.

Charlie

>
> Actually with pydbg you can use the branch gera did :), and you  
> don't need IDA.
> In vtrace you have symbols access for the imports and exports. For  
> the not exported internal functions and basic blocks you can use  
> gera's module also. You can also use a pida file to do the same  
> thing you do with pydbg, except that with vtrace you can target more  
> platforms. :)
> _______________________________________________



More information about the fuzzing mailing list