Command Line Arguements

Successful Fuzzing was preformed using the following:

afl-fuzz.exe -t 10000 -D C:\Users\User\Downloads\DynamoRIO-Windows-9.0.19146\bin64 -i .\test\i5 -o .\test\o5 -- -coverage_module MFCORE.DLL -coverage_module mfsrcsnk.dll -fuzz_iterations 10 -target_module wmf_harness.exe -target_method main -nargs 2 -- C:\Users\User\Desktop\Work\Media_Players\AVI\Microsoft\wmf_harness\wmf_harness\x64\Release\wmf_harness.exe @@

coverage_module

The module we are fuzzing, in this case MFCore contains the Windows Media Foundation functions which demultiplex the test avi file. More than one coverage_module can be specified, if your module of interest isn't always called you will need to specify another, such as the main binary.

target_module

The harness binary.

target_method

The exported function name, alternatively you can disable ASLR and provide a target_offset.

nargs

Number of arguements, the arg '@@' above indicates the file path WinAFL will provide.

Last updated

Was this helpful?