unicorefuzz linux kernel

AFLplusplus安装需要安装的依赖包：

//先安装AFLplusplus的依赖
$ sudo apt install build-essential libtool-bin python3 automake bison libglib2.0-dev libpixman-1-dev clang python-setuptools llvm
//$ make distrib
//$ sudo make install

//官网下载unicorefuzz.zip源码   -->  此方法不可取，后面会讲到

curtis@curtis-virtual-machine:~/Desktop/unicorefuzz-master$ ./setup.sh 
=================================================
Unicorefuzz Installation script
=================================================

[*] Performing basic sanity checks...
/usr/bin/python3: No module named pip
[-] Error: Could not find pip3. Run 'sudo apt-get install python3-pip'

sudo apt-get install python3-pip

//执行脚本时报错
..............................
urllib3.exceptions.ReadTimeoutError: HTTPSConnectionPool(host='files.pythonhosted.org', port=443): Read timed out.
//原因分析
在下载python库的时候，由于国内网络原因，python包的下载速度非常慢，下载超时
//解决办法，修改pip源
mkdir ~/.pip
vim ~/.pip/pip.conf
//添加源可以自己选择
  阿里云 http://mirrors.aliyun.com/pypi/simple/ 
  中国科技大学 https://pypi.mirrors.ustc.edu.cn/simple/ 
  豆瓣(douban) http://pypi.douban.com/simple/ 
  清华大学 https://pypi.tuna.tsinghua.edu.cn/simple/ 
  中国科学技术大学 http://pypi.mirrors.ustc.edu.cn/simple/
//在文件中添加
 [global]
 index-url = http://mirrors.aliyun.com/pypi/simple/
//重启系统，让设置的pip源生效，然后执行以下命令，会发现下载的速度根本不是一个等级
source ~/.pip/pip.conf
sudo ./setup.sh

[*] All python deps have been installed.
[+] Cloning Submodules
fatal: not a git repository (or any of the parent directories): .git
fatal: not a git repository (or any of the parent directories): .git

git init

[*] All python deps have been installed.
[+] Cloning Submodules
[+] Running make for AFL++
make: *** No targets specified and no makefile found.  Stop.
//原因是因为直接在git上下载的xxxxx.zip代码，没有git相关信息，执行./setup.sh时不会从git上自动拉取AFLplusplus 和 uDdbg源代码
//解决办法，直接clone源代码
git clone https://github.com/fgsect/unicorefuzz.git

cd /path/to/unicorefuzz
./setup.sh

Processing /home/curtis/Desktop/unicorefuzz/uDdbg
Collecting capstone (from udbg==0.0.1)
  Using cached https://files.pythonhosted.org/packages/38/85/647d512c2c2e2981d6f4c70ed41c5ec3d8d6f06cc9c9dd63348e8e6a21a3/capstone-4.0.2-py2.py3-none-manylinux1_x86_64.whl
Collecting hexdump (from udbg==0.0.1)
  Downloading https://files.pythonhosted.org/packages/55/b3/279b1d57fa3681725d0db8820405cdcb4e62a9239c205e4ceac4391c78e4/hexdump-3.3.zip
Collecting inquirer (from udbg==0.0.1)
  Downloading https://files.pythonhosted.org/packages/60/10/450a7edfaea3d09a4a7062bd567178bfb66233bae3ee0042934910e180de/inquirer-2.7.0-py2.py3-none-any.whl
Collecting keystone-engine (from udbg==0.0.1)
  Using cached https://files.pythonhosted.org/packages/01/5c/40ffbec589262f49ff7c463d96ff0bfab0fbd98d9d869c370a70853a13fb/keystone_engine-0.9.2-py2.py3-none-manylinux1_x86_64.whl
Collecting prompt-toolkit (from udbg==0.0.1)
  Could not find a version that satisfies the requirement prompt-toolkit (from udbg==0.0.1) (from versions: )
No matching distribution found for prompt-toolkit (from udbg==0.0.1)
//没有找到合适版本的包，那就再找找看，重新执行 ./setup.sh 报错解决
[*] Dependencies installed successfully.

[*] To use AFL++ outside of unicorefuzz,
    export PATH=$PATH:/home/curtis/Desktop/unicorefuzz/AFLplusplus
[+] To use 'ucf' from any folder:
    export PATH=$PATH:/home/curtis/Desktop/unicorefuzz

        .----------------------------------------.
        |--- Unicore setup complete. Enjoy :) ---|
        '----------------------------------------'

unicorefuzz 已经把所有的依赖安装完了，接下来就是要怎么用这个工具来fuzzing linux 内核了。

参考链接：https://blog.csdn.net/lambert310/article/details/52412059