FuzzCon_2021-Logo

FUZZCON EUROPE 2021

The World Largest AppSec Conference About Fuzz Testing

OCTOBER 21st, 2021 | 100% ONLINE

 

LibAFL: The Advanced Fuzzing Library

 

Format

Coding Session

Session Time

8:15 - 8:45 pm (CET)

Speaker

Andrea Fioraldi & Dominik Maier

Abstract

In this talk, we present LibAFL, a library to build scalable, extendable fuzzers in Rust.

LibAFL can fuzz on Windows, Linux, MacOS, Android, and even embedded devices and offers a wide variety of source and binary-only instrumentation modes. Before LibAFL, the common path to implement a novel fuzzing idea was to fork AFL's monolithic codebase. This spawned countless improvements that cannot be combined.

To make new research compatible, we worked for over a year on a framework that allows complete code reuse, similar to how LLVM allows you to stack own passes onto existing ones (in theory) without issues. Instead of a command line tool one-trick-pony, LibAFL allows security researchers to slot the perfect fuzzer for their target together. They can combine our algorithms, implemented as ready-to-use blocks, with their own, in a completely orthogonal way.

We present the ideas behind LibAFL, and how to use and extend it for your own projects. Save the date!

Click here to register for FuzzCon Europe 2021

About Dominik Maier & Andrea Fioraldi 

Andrea Maier and Dominik Fioraldi are members of the AFL++ team, maintaining a well-known fork of afl-fuzz. Both improve and extend the reach of fuzz testing as part of their PhD studies at EURECOM and TU Berlin respectively. They enjoy playing CTFs at a high level with their corresponding teams, mHACKeroni and ENOFLAG.

Andrea runs a DEFCON group for the roman hacker community, DC11396 where fuzzing is a major topic. Dominik fuzzes basebands and works in the security department of a WiFi router vendor.

Over a year ago they started development of LibAFL, a framework for custom fuzzers in Rust, as a spin-off to AFL++. You can reach them on Twitter as @andreafioraldi and @domenuk or in the fuzzing Discord server.

FuzzCon_Logo_rund
JOIN US FOR FUZZCON EUROPE 2021!

FuzzCon Europe is bringing developers and security experts together to build more robust and secure software.