American Fuzzy Lop 2.07b the open source fuzzing tool is now available for download. This tool is more lightweight than other similar tools and has been attributed to the catching of several bugs in popular libraries and tools out in the wild today.
This fuzzing tool is a great tool that can be used to improve other core tools and pieces of software. It works on both 32 and 64 bit x86 Linux, OpenBSD, FreeBSD, and NetBSD platforms with some dodgy Mac OS X and Solaris support.
Even though there are variants and derivatives of American Fuzzy Lop that allow you to fuzz Python, Go, Rust, or GCJ Java, this tool is designed primarily to fuzz programs written in C, C++, or Objective C.
Just to be clear, fuzzing is one of the most powerful and proven strategies for identifying security issues in real-world software. Though most fuzzing techniques are somewhat mild, American Fuzzy Lop can be termed as a brute-force fuzzer and therefore has seen some great success.
American Fuzzy Lop can handle simple to complex tasks with little or no configuration
What’s new in American Fuzzy Lop 2.07b?
Added CPU affinity option (-Z) on Linux. This can produce a significant performance increase of more than ten percent and reduce jitter.
Also updated is afl–gotcpu to use CPU affinity where supported and fixed confusing CPU_TARGET error messages with QEMU build.
You can get more information about the latest release of this fuzzing tool here. You can also head on straight to the American Fuzzy Lop releases page and download the latest preferred copy now.
Refs:
http://lcamtuf.coredump.cx/afl/README.txt
http://lcamtuf.coredump.cx/afl/technical_details.txt
Found this article interesting? Follow Brightwhiz on Facebook, Twitter, and YouTube to read and watch more content we post.