afl++ blackbox fuzz test

aflfuzz/fuzz_in/blank_test.txt

@@ -0,0 +1,2 @@
+
+

aflfuzz/fuzz_in/right_admin.txt

@@ -0,0 +1,2 @@
+admin
+admin123

aflfuzz/fuzz_in/right_user.txt

@@ -0,0 +1,2 @@
+user1
+password1

aflfuzz/fuzz_in/wrong_admin.txt

@@ -0,0 +1,2 @@
+admin
+admin

aflfuzz/fuzz_in/wrong_user.txt

@@ -0,0 +1,2 @@
+user
+password

aflfuzz/install.sh

@@ -0,0 +1,19 @@
+#!/bin/bash
+
+# apt install afl++ не поддерживает qemu режим, соберём из исходников
+# https://github.com/AFLplusplus/AFLplusplus/blob/stable/docs/INSTALL.md
+
+sudo apt-get update
+sudo apt-get install -y build-essential python3-dev automake cmake git flex bison libglib2.0-dev libpixman-1-dev python3-setuptools cargo libgtk-3-dev
+# try to install llvm-18 and install the distro default if that fails
+sudo apt-get install -y lld-18 llvm-18 llvm-18-dev clang-18 || sudo apt-get install -y lld llvm llvm-dev clang
+sudo apt-get install -y gcc-$(gcc --version|head -n1|sed 's/\..*//'|sed 's/.* //')-plugin-dev libstdc++-$(gcc --version|head -n1|sed 's/\..*//'|sed 's/.* //')-dev
+sudo apt-get install -y meson ninja-build # for QEMU mode
+sudo apt-get install -y cpio libcapstone-dev # for Nyx mode
+sudo apt-get install -y wget curl # for Frida mode
+sudo apt-get install -y python3-pip # for Unicorn mode
+git clone https://github.com/AFLplusplus/AFLplusplus
+cd AFLplusplus
+git submodule update --init
+make distrib
+sudo make install

aflfuzz/run_fuzz.sh

@@ -0,0 +1,10 @@
+#!/bin/bash
+
+mkdir -p data
+cp ../data/users.db ./data/users.db
+mkdir -p configs
+cp ../configs/config.toml ./configs/config.toml
+
+mkdir -p fuzz_out
+
+afl-fuzz -V $(( 60 * 5 )) -Q -i fuzz_in -o fuzz_out -- ../build/release/authapp