mirror of
https://github.com/SHOGGOTH-SECTOR/sica-fondt.git
synced 2026-08-01 08:30:20 +00:00
24f816b6a3
Place useful parts of the surrounding repos into sica-fondt by layer, per the
body model (Ada = membrane; brain/endocrine/capabilities/knowledge non-Ada):
- brain/ LLM reasoning + providers (dapr, hermes, MoMoA)
- capabilities/ REPRAG sidecars: hermes tools/skills, dapr tools, parallel
dispatch, A51 channels, and the OSINT cluster
- knowledge/ LORAG corpus: 754 cyber-skills, agency personas, secure-coding,
MITRE ATT&CK data
- reference/ defensive threat-reference (C3, shhbruh doc) + AdaYaml parser
License handling: AGPL sources (worldosint, advanced_evolution, mercury,
Reticulum) and GPL DeTTECT are SPEC-only clean-room/port descriptions — no
copyleft code copied. MIT/Apache/data parts copied as working trees.
Safety: shhbruh escape/persistence material and C3 covert-C2 kept as reference
only, not wired into the running organism. See CONSOLIDATION.md.
https://claude.ai/code/session_01UehUqEXXJJCsHoA4voCU5c
65 lines
2.2 KiB
Markdown
65 lines
2.2 KiB
Markdown
# AFL++ Fuzzing — API Reference
|
|
|
|
## Installation
|
|
|
|
```bash
|
|
apt install afl++ # Ubuntu/Debian
|
|
# Or build from source:
|
|
git clone https://github.com/AFLplusplus/AFLplusplus && cd AFLplusplus && make all
|
|
```
|
|
|
|
## AFL++ CLI Tools
|
|
|
|
| Tool | Description |
|
|
|------|-------------|
|
|
| `afl-cc` / `afl-clang-fast` | Compile-time instrumentation compiler wrapper |
|
|
| `afl-fuzz` | Main fuzzer — coverage-guided mutation engine |
|
|
| `afl-cmin` | Corpus minimization — remove redundant seeds |
|
|
| `afl-tmin` | Test case minimization — shrink individual inputs |
|
|
| `afl-whatsup` | Multi-instance campaign status summary |
|
|
| `afl-plot` | Generate fuzzing progress plots |
|
|
| `afl-showmap` | Display coverage map for a single input |
|
|
|
|
## afl-fuzz Key Flags
|
|
|
|
| Flag | Description |
|
|
|------|-------------|
|
|
| `-i <dir>` | Input seed corpus directory |
|
|
| `-o <dir>` | Output directory for findings |
|
|
| `-m <MB>` | Memory limit (use `none` for ASAN) |
|
|
| `-t <ms>` | Execution timeout per test case |
|
|
| `-x <dict>` | Optional fuzzing dictionary |
|
|
| `-p <sched>` | Power schedule: fast, coe, explore, rare, mmopt |
|
|
| `-l <level>` | CMPLOG instrumentation level (2=transforms, 3=all) |
|
|
| `-c <bin>` | CMPLOG binary for input-to-state |
|
|
| `-M <name>` | Main fuzzer instance (parallel mode) |
|
|
| `-S <name>` | Secondary fuzzer instance (parallel mode) |
|
|
| `-Q` | QEMU mode (binary-only fuzzing) |
|
|
| `-U` | Unicorn mode |
|
|
|
|
## fuzzer_stats File Fields
|
|
|
|
| Field | Description |
|
|
|-------|-------------|
|
|
| `execs_done` | Total executions completed |
|
|
| `execs_per_sec` | Current execution speed |
|
|
| `corpus_count` | Total paths in corpus |
|
|
| `saved_crashes` | Unique crashes discovered |
|
|
| `saved_hangs` | Unique hangs discovered |
|
|
| `stability` | Execution stability percentage |
|
|
| `bitmap_cvg` | Code coverage bitmap density |
|
|
|
|
## Crash Triage Tools
|
|
|
|
| Tool | Purpose |
|
|
|------|---------|
|
|
| `casr-afl` | CASR crash severity analysis for AFL++ |
|
|
| `afl-tmin` | Minimize crash inputs |
|
|
| `gdb --batch -ex run` | Reproduce crash under debugger |
|
|
|
|
## External References
|
|
|
|
- [AFL++ Documentation](https://aflplus.plus/docs/)
|
|
- [AFL++ GitHub](https://github.com/AFLplusplus/AFLplusplus)
|
|
- [CASR Crash Triage](https://github.com/ispras/casr)
|