diff options
author | vanhauser-thc <vh@thc.org> | 2024-01-30 15:14:02 +0100 |
---|---|---|
committer | vanhauser-thc <vh@thc.org> | 2024-01-30 15:14:02 +0100 |
commit | 75af391408086ee0f1cd892dadb6df2fb16d05c3 (patch) | |
tree | 66b2a697f9fcb598395c4cee83aef84dd1044585 | |
parent | 9604fe922ede9282a06a89b8d18d4de267aebd54 (diff) | |
download | AFLplusplus-75af391408086ee0f1cd892dadb6df2fb16d05c3.tar.gz |
improve nyx docs
-rw-r--r-- | nyx_mode/README.md | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/nyx_mode/README.md b/nyx_mode/README.md index aee9879e..7a2a8e6c 100644 --- a/nyx_mode/README.md +++ b/nyx_mode/README.md @@ -84,9 +84,17 @@ Then the final step: we generate the Nyx package configuration: python3 nyx_mode/packer/packer/nyx_config_gen.py PACKAGE-DIRECTORY Kernel ``` - ## Fuzzing with Nyx mode +Note that you need to load the kvm kernel modules for Nyx: +``` +sudo modprobe -r kvm-intel +sudo modprobe -r kvm +sudo modprobe kvm enable_vmware_backdoor=y +sudo modprobe kvm-intel +cat /sys/module/kvm/parameters/enable_vmware_backdoor | grep -q Y && echi OK || echo KVM module problem +``` + All the hard parts are done, fuzzing with Nyx mode is easy - just supply the `PACKAGE-DIRECTORY` as fuzzing target and specify the `-X` option to afl-fuzz: @@ -94,16 +102,8 @@ All the hard parts are done, fuzzing with Nyx mode is easy - just supply the afl-fuzz -i in -o out -X -- ./PACKAGE-DIRECTORY ``` -Most likely your first run will fail because the Linux modules have to be -specially set up, but afl-fuzz will tell you this on startup and how to rectify -the situation: - -``` -sudo modprobe -r kvm-intel # or kvm-amd for AMD processors -sudo modprobe -r kvm -sudo modprobe kvm enable_vmware_backdoor=y -sudo modprobe kvm-intel # or kvm-amd for AMD processors -``` +If you get a forkserver error upon starting then you did not load the Linux +kvm kernel modules, see above. If you want to fuzz in parallel (and you should!), then this has to be done in a special way: |