Skip to content
Snippets Groups Projects
Commit 7c9fa804 authored by Anh Nguyen-Tuong's avatar Anh Nguyen-Tuong
Browse files

Update README.md

parent 9b7998da
No related branches found
No related tags found
No related merge requests found
......@@ -213,16 +213,29 @@ afl-cmin -i out/queue/ -o out.cmin -- ./ls.zafl @@
Et voila!
## Other options to zafl.sh
## Options to zafl.sh
To specify the entry point for the fork server (by default, zafl.sh will look for main()):
```zafl.sh <target_binary> <zafl_output_binary> -o zafl:--entrypoint {<functionName> | 0xaddress}```
To specify exit points:
```zafl.sh <target_binary> <zafl_output_binary> -o zafl:--exitpoint {<functionName> | 0xaddress}```
To specify multiple exit points:
```zafl.sh <target_binary> <zafl_output_binary> -o zafl:--exitpoint {<functionName> | 0xaddress} ... -o zafl:--exitpoint {<functionName> | 0xaddress}```
To specify a whitelist of functions to instrument:
```zafl.sh <target_binary> <zafl_output_binary> -o zafl:--whitelist <whitelistFile>
To specify a blacklist of functions to skip:
```zafl.sh <target_binary> <zafl_output_binary> -o zafl:--blacklist <blacklistFile>
The white and black list files contain one entry per line.
# TL;DR
Once everything is installed properly:
```zafl.sh <target_binary> <zafl_output_binary>```
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment