[Fuzzing with AFL] How to fuzz a binary with no source code using QEMU mode?

In this video we will see how to do binary only fuzzing when you don't have source code. we will see following:
1. How to build Qemu support for AFL on linux.
2. troubleshooting steps.
3. Fuzzing our Damn Vulnerable C program binary with AFL in Qemu mode.

get the small patch file for qemu here to fix compilation error:

Sample C program mentioned in the video can be downloaded from here:

Please like and subscribe my channel for more videos related to various security topics:

[JasminderPalSingh]

I have few errors compiliing qemu. Would appreciate if you can help.

error: static declaration of ‘gettid’ follows non-static declaration

error: ‘SIOCGSTAMP’ undeclared here (not in a function); did you mean ‘SIOCSRARP’

error: ‘SIOCGSTAMPNS’ undeclared here (not in a function); did you mean ‘SIOCGSTAMP_OLD’?

[luckythandel]

Really nice, keep working, keep posting

[shubhamingle]

This may be a dumb question but still gonna ask:
Why qemu is required for black box fuzzing? 🤔

[MurtadaABahal]

you just talking mush more than giving good tuts