Given a sequence, generate a number of selectively chosen strings lengths of the given sequence. NOTE: argument max_len sets

Implementation of Shannon's Entropy Ero Carrera is the man

Help message

Generates mutated contents from a sample file

Gets a filename from the Mutation Queue Moves the Queue elements around (from mutation to processed one)

Information regarding the computer where the fuzzer is running

Try to connect back to the server

Convenience wrapper

This is called with the command line (including the filename) which caused the crash before. It is a late analysis routine which sorts th

Applies the selected plugins in *reverse* order to recreate the original file format :param mutated_buffer: eeeh... the mutat

Applies the selected plugins in order to extract the raw data to be mutated :param file_contents: eeeh... the input file cont

Open a connection to the SQLite DB

Not interesting mutation. Kill it with fire.

Resets the database to its initial state (empty, in this case)

Fuzzing Loop. This loops (maybe indefinitely) creating several fuzzing processes

This generates HTML code representing a table

Produce generic (independent from input) strings. These are known to exercise some corner cases.

Gets a random filename from inside the ZipFile object, with the selected file extension :return: arbitrary filename of selected type (ext

This is particularly effective for delimiters but it would be useful for other tokens :return: random element of list of toke

Printing to console is dirty

Load the selected plugins and makes them available to Cthulhu :return:

Compare the bitmap corresponding to the current trace with the history of taken paths. NOTE: the return values are different than the one

This creates a shared memory region NOT backed up by a file

Initializes fuzzing parameters with information stored in a config file

Filenames are usually rejected if they contain funky characters, blocking execution

Returns a random string, UTF-8 encoded

Read the database

Gets all crash information :return: iterator of tuples

Runs the given file under PIN and gets the bitmap representing execution :returns: this bitmap

Process data to a format suitable for storage in the SQLite database

It creates the test case contents :return: Tuple (original, mutated) filenames or None

This is the meat and potatoes!!!1! Generators are cool Itertools are better!

Finish and cleanup functions

This identifies conditional jumps (don't care which kind) NOTE: These are all instrumentation functions (JIT), they just point to the analysis ones

:return:

Simplicity is better than complexity

This is a poor man's dashboard :)

Uniquely name the files test.123.txt

Existing mutation.xxx files from old runs could be a problem. Erase them before.

This is used for custom autocompletions Ex: the arguments are read from a db, etc.

It does what it says :)

This implements the whole logic. The code below triggered by an access violation is responsible for storing / doing whatever with the cra

Exactly what it says :) Randomly selects a block and deletes it

Print the input, replacing '$out' with the output of the last shell command

Greet the person

Change the interactive prompt

Quits the application, obviously

Clears the DB

Run a shell command

Implemented as a generator. Did I mention Ero is the man?

FIXME: things like mutation, crash, etc. dirs should be read from a config file and be available globally

Returns a list of absolute filename + path within the given directory

Exactly that :param file: filename + path :return: None or Base64 string

The function name is its own documentation :)

It returns a random filename from a directory

Let's do things right. Calculate the size of an unsigned long for this architecture. Or 4 :)

Given a hit number, return the corresponding bin Hit bins: {1, 2, 3, 4-7, 8-15, 16-31, 32-127, 128+}

This is called every time a MODULE (dll, etc.) is LOADED Analysis function (execution time)

Increases byte values from a random segment by a random value

Main function - initialize and set instrumentation callbacks */

Mutates a token (subset from the buffer) and substitutes it with its mutation

This example plugin does not really process the data. It just prints some debug message :param mutated_data: data mutated by Cthulhu

This is rather tricky since it is not possible to delete or update a file within a Zip file in Python It is necessary to create a new Zip

Executed once after the Cmd prompt

This example plugin does not really process the data. It just prints some debug message :param raw_data: file contents :return: unmod

This plugin extracts the contents of a random file within the original Zip file :param raw_data: file contents :return: Extracted dat

Executed once before the Cmd prompt

Returns a string of random bytes (excluding zero)

Returns a random hex string

Convenience function. Returns an integer

Returns a random URL

Just a convenience wrapper

Restore the saved bitmap from a pickle dump to a file (or returns None)

Convenience wrapper

Simple substitution with *standard tokens* This is equivalent to smash the original bytes

Just swapping stuff