Skip to content

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Appearance settings

fuzzing multiple targets round-robin #2210

Unanswered
martinus asked this question in Q&A
Sep 17, 2024 · 2 comments · 1 reply
Discussion options

I've currently a setup where I'd like to continuously fuzz about 20 targets or so (will likely increase over time)... Currently I basically have a script that has an infinite loop over all targets and fuzzes each with AFL_EXIT_ON_TIME set to ~10 minutes. So when nothing is found after 10 minutes, the next target is fuzzed. This seems to work well as it gives targets where more is found more time too.

What I'm wondering though, is that advisable to stop & start the fuzzers so often? startup seems to be fast for my use cases (takes a few seconds at most), but I notice the "pending" number is always quite high that way.

I have also set AFL_AUTORESUME and AFL_FINAL_SYNC.

You must be logged in to vote

Replies: 2 comments · 1 reply

Comment options

Historically the performance to resume used to be really bad - the fuzzer would have spent a considerable amount of the 10 minutes just going through the original queue.
However, AFL++ recently added the fast resume option and with that this should be fine, I think?
Basically it will load the state from a file instead of rebuilding it on startup.

You must be logged in to vote
0 replies
Comment options

if you run the most current stable branch then there is the fast resume feature (automatically active) - however this only works if the target is not recompiled.
Generally what you are doing does not sound very smart to be honest. It would be more advisable to fuzz them for longer, 10 minutes is nothing.

You must be logged in to vote
1 reply
@martinus
Comment options

I guess my real question is, is it (much) worse to fuzz a total of 1 day (with stop & start every 10 minutes) than fuzzing continuously for a day? Startup seems quite fast for me.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Category
🙏
Q&A
Labels
None yet
3 participants
Morty Proxy This is a proxified and sanitized view of the page, visit original site.