Frida Fuzzer Versions Save

This experimetal fuzzer is meant to be used for API in-memory fuzzing.

1.4

4 years ago
  • IA32 inlined instrumentation
  • ArrayBuffer.tranfer missing on old JS fixed
  • fixed typos in README

1.3

4 years ago
  • Naive timeout support (set it in config.js)
  • Queue prioritization using favored paths
  • Port many parts of queue.js to C using CModule
  • Better exec/sec counting
  • Routines to convert from UTF-8 strings to Uint8Array and back (mainly for Java strings in harnesses)

1.2

4 years ago
  • Fuzzer queue cached in the process to minimize the exchanged messages and speedup remote fuzzing (e.g. Android via adb)
  • Stalker transform in CModule to speedup not-x64 targets
  • Support to fuzzer dictionary (see tests/test_libxml2.js)
  • Various dumb fixes

1.1

4 years ago
  • Android Java code fuzzing (with example in tests/test_java.js)
  • Pipe stdio when spwaning in local to avoid to mess the fuzzer stats screen

1.0

4 years ago

First release. Things that happened before:

  • Fuzzer backbone
  • Havoc and splice stages.
  • Fixes in upstream frida to collect coverage with Stalker.