diff --git a/README.md b/README.md index f087627332..e3590ad05d 100644 --- a/README.md +++ b/README.md @@ -28,7 +28,7 @@ LibAFL offers integrations with popular instrumentation frameworks. At the momen + SanitizerCoverage, in [libafl_targets](./libafl_targets) + Frida, in [libafl_frida](./libafl_frida), by s1341 -+ More to come (QEMU-mode, ...) ++ QEMU user-mode, in [libafl_qemu](./libafl_qemu) ## Getting started diff --git a/TODO.md b/TODO.md index 888fc72dbc..24b733cebc 100644 --- a/TODO.md +++ b/TODO.md @@ -2,16 +2,16 @@ - [ ] Objective-Specific Corpuses (named per objective) - [ ] Good documentation -- [ ] LLMP compression -- [ ] AFL-Style Forkserver Executor - [ ] LAIN / structured fuzzing example - [ ] More informative outpus, deeper introspection (stats, what mutation did x, etc.) - [ ] Timeout handling for llmp clients (no ping for n seconds -> treat as disconnected) -- [ ] "Launcher" example that spawns broker + n clients - [ ] Heap for signal handling (bumpallo or llmp directly?) - [ ] Frida support for Windows -- [ ] QEMU based instrumentation -- [ ] AFL++ LLVM passes in libafl_cc +- [x] LLMP compression +- [x] AFL-Style Forkserver Executor +- [x] "Launcher" example that spawns broker + n clients +- [x] QEMU based instrumentation +- [x] AFL++ LLVM passes in libafl_cc - [x] LLMP Cross Machine Link (2 brokers connected via TCP) - [x] Conditional composition of feedbacks (issue #24) - [x] Other objectives examples (e.g. execution of a given program point)