Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
AFL-Unicorn provides the capability to fuzz any binary that can be emulated using the Unicorn Engine, allowing you to target specific code segments for testing. If you can emulate the desired code with the Unicorn Engine, you can effectively use AFL-Unicorn for fuzzing purposes. The Unicorn Mode incorporates block-edge instrumentation similar to what AFL's QEMU mode employs, enabling AFL to gather block coverage information from the emulated code snippets to drive its input generation process. The key to this functionality lies in the careful setup of a Unicorn-based test harness, which is responsible for loading the target code, initializing the state, and incorporating data mutated by AFL from its disk storage. After establishing these parameters, the test harness emulates the binary code of the target, and upon encountering a crash or error, triggers a signal to indicate the issue. While this framework has primarily been tested on Ubuntu 16.04 LTS, it is designed to be compatible with any operating system that can run both AFL and Unicorn without issues. With this setup, developers can enhance their fuzzing efforts and improve their binary analysis workflows significantly.
Description
Osquery serves as a framework for operating system instrumentation across various platforms, including Windows, macOS, and Linux. It provides efficient and user-friendly tools for performing in-depth analysis and monitoring of operating system activities. Often, cybercriminals may keep a harmful process active while removing its original binary from the disk. This specific query can identify processes with missing binaries, which may signal potentially harmful activity. Our build system is designed to rigorously evaluate and validate any new code introduced into the environment. Additionally, we conduct ongoing tests to check for memory leaks, ensure thread safety, and confirm binary reproducibility on every supported platform to maintain system integrity. Implementing these practices helps us stay ahead of potential security threats.
API Access
Has API
No
API Access
Has API
No
Integrations
Dropzone AI
No
SQL
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
Yes
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Battelle
Website
github.com/Battelle/afl-unicorn
Vendor Details
Company Name
osquery
Website
www.osquery.io