sslab-gatech / winnie

Winnie is an end-to-end system that makes fuzzing Windows applications easy

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

How to use harnessgen as described in the paper?

RLee063 opened this issue · comments

Is this the final version of the code? I took a rough look at the code and didn't find where some functions are implemented, such as

  • WINNIE also identifies library functions that do not open or read the file themselves but instead accept a file descriptor or an in-memory buffer as input.
  • WINNIE analyzes the control-flow between two API calls for paths from the return value of the invoked function to a termination condition. If such a path is found, WINNIE duplicates the decompiled control-flow code.
  • Harness Validation and Finalization.

And I don't understand how the LCA results are used to guide the generation of the harness, and how to pass the seed when the APIs parameters do not contain the sample name. Maybe some complete examples would be very helpful :)

By the way, although "WINNIE's harness generator focuses testing shared libraries", many of the 59 harnesses target the executable. I am very interested in how to apply harnessgen to the main executable.

I believe jinho would be the person to ask for this as he is the first author of the paper and also responsible for the harness generation component.

I will help him with my code (uncleaned though). Thanks.

Thanks for your prompt reply, since Jinho has contacted me via email, I will close this issue.
Appreciate your work!

As I am also interested in this topic, I would like you to communicate with us on GitHub as much as possible... Would it be possible? Thank you.

I reopened this issue for further discussion.

As I am also interested in this topic, I would like you to communicate with us on GitHub as much as possible... Would it be possible? Thank you. I was trying to get harness gen to work on 7z.exe as its described in the paper.

As I am also interested in this topic, can I get more details on Github?If so,Thank you very much!

@RLee063 Can you give me more details about harness?

Hey, I am working on the code cleaning as well as documentation. It should be released soon.

Sorry for the late work.

@jinhojun Excuse me, does you have any contact ?
I'm using the harnessgen for a pictureViewer, but cannot collect any method logs.

@jinhojun,
I tidy up my problem, and send email to you.
Thanks.

Hey, I am working on the code cleaning as well as documentation. It should be released soon.

Sorry for the late work.

Any update on this? I am happy to do a read through and test of what is there so far, if you would like.

commented

I am very interested in this topic and trying to generate the harness,but failed. Could you please give me more details about generating harness,like some complete examples? Thank you very much : )

@jinhojun
Is there any follow up with harness generating code?

@jinhojun I am also interested.

@jinhojun I am interested in harness generating, can we communicate via email?