23 releases

0.15.12 Nov 20, 2024
0.15.10 Jul 19, 2024
0.15.4 Mar 11, 2024
0.15.1 Dec 16, 2023
0.0.0 Mar 27, 2023

#413 in Testing

Download history 448/week @ 2024-08-09 1199/week @ 2024-08-16 315/week @ 2024-08-23 528/week @ 2024-08-30 478/week @ 2024-09-06 347/week @ 2024-09-13 571/week @ 2024-09-20 545/week @ 2024-09-27 463/week @ 2024-10-04 870/week @ 2024-10-11 604/week @ 2024-10-18 569/week @ 2024-10-25 594/week @ 2024-11-01 784/week @ 2024-11-08 1142/week @ 2024-11-15 427/week @ 2024-11-22

3,053 downloads per month

Apache-2.0

5MB
122K SLoC

C 97K SLoC // 0.1% comments C++ 15K SLoC // 0.1% comments Python 4K SLoC // 0.2% comments Shell 3K SLoC // 0.1% comments Rust 747 SLoC // 0.1% comments JavaScript 552 SLoC // 0.2% comments BASH 363 SLoC // 0.2% comments TypeScript 328 SLoC // 0.4% comments Jupyter Notebooks 99 SLoC // 0.4% comments CodeQL 45 SLoC // 0.1% comments Java 43 SLoC // 0.4% comments Bitbake 33 SLoC SQL 3 SLoC

Contains (ELF exe/lib, 21KB) persistent_target, (ELF exe/lib, 17KB) persistent_target_x86_64, (ELF exe/lib, 18KB) simple_target_x86_64, (ELF exe/lib, 17KB) persistent_target_x86_64, (ELF exe/lib, 18KB) simple_target_x86_64, (static library, 1KB) small_archive.a and 2 more.

afl.rs logo
afl.rs

Fuzzing Rust code with AFLplusplus

What is it?

Fuzz testing is a software testing technique used to find security and stability issues by providing pseudo-random data as input to the software. AFLplusplus is a popular, effective, and modern fuzz testing tool based on AFL. This library, afl.rs, allows one to run AFLplusplus on code written in the Rust programming language.

Documentation

Documentation can be found in the Rust Fuzz Book.

What does it look like?

Screen recording of afl

Screen recording of AFL running on Rust code.

Hints

Before starting to fuzz, you should reconfigure your system for optimal performance and better crash detection. This can be done with cargo afl system-config. But this subcommand requires root, so it uses sudo internally. Hence, you might need to enter your password.

By default, the AFL++ CMPLOG feature is activated, which helps to achieve good code coverage. However, it is not beneficial to activate CMPLOG on more than two instances. So if you run multiple AFL++ instances on your fuzzing target, you can disable CMPLOG by specifying the command line parameter '-c -'.

This document will familiarize you with AFL++ features to help in running a successful fuzzing campaign.

By default, the fuzzing config is set when cargo-afl is used to build. If you want to prevent this, just set the environment variable AFL_NO_CFG_FUZZING to 1 when building.

Dependencies

~5–15MB
~217K SLoC