embeddedAFL is an integration of AFL that enables us to find vulnerabilities in industrial controllers using its SoC hardware tracing capabilities
embeddedAFL uses the following tools to fuzz an industrial controller:
For further information please see the thesis.
The first question when trying to fuzz an embedded device is, what should fill the gap between the fuzzer and the fuzzing target...
The solution is a software that translates between both worlds
For this setup embeddedAFL was built
Furthermore the MTTTY library was forked to be able to read and write via serial with a todays computer.