Skip to content

Improving state coverage of greybox fuzzing

· 0 citations · 24 references

TL;DR

AFLWalk is created, a variant of AFLNet, as an attempt to address the challenge of testing stateful protocols by focusing exclusively on message-sequence mutations to steer exploration through protocol state machines, rather than applying byte-level mutations such as bit-flipping.

View source

Similar papers

Conference Open access 2026

PSF: A Generic and Extensible Framework for Protocol State Fuzzing

The distinctive features and support of Protocol state fuzzer, an open source, generic, modular, and extensible framework for state machine learning and testing of network protocol implementations, are described.

Konstantinos Sagonas, Thanos Typaldos · 0 citations
Open access Aug 2026

SNIPTEST: Fuzzing Multi-Level Code Slices for Validating Vulnerabilities

SNIPTEST is an execution-based warning triage framework that generates and fuzzes compiled code slices centered around static-analysis warnings that employs a layer-by-layer slicing strategy, incrementally expanding context around the target location to validate potential vulnerabilities with increasing precision.

Aniruddhan Murali, Noble Saji Mathews, Mahmoud Alfadel et al. · 0 citations
Open access Aug 2026

A Stateful Fuzzing Methodology for Security Verification of 5G Core Equipment

A stateful security verification methodology that combines stateful fuzzing with specification-guided security verification of the NG Application Protocol between the radio access network and the 5G core is proposed.

Seungjoon Na, Hwankuk Kim · 0 citations
Book Open access Sep 2026

State-Aware Fuzzing of JavaScript Engines with LLM-Guided Instrumentation

The StateLens framework is presented, a framework that employs Large Language Models (LLM) to automate the discovery of deep internal states and significantly outperforms state-of-the-art fuzzers and uncovers 68 new bugs.

Wai-Kin Wong, Dong-Wei Xiao, Anthony Cheuk Tung Lai et al. · 0 citations
Preprint Sep 2026

Robustness-Aware Evaluation and Enhancement of Mutation-Based Fuzzing for Bug Discovery

Splitting, a black-box wrapper that copies a fuzzer's queue state after a bug trigger and continues from that state in multiple branches, directing more effort toward the discovered region, provides a practical way to measure and improve fuzzers.

Zi-Rui Liu, Meng-Fan Xu, Juan Zhai et al. · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.