Skip to content

Commit 80f8640

Browse files
committed
fix: update Lab7/README.md
1 parent bde6354 commit 80f8640

File tree

2 files changed

+12
-11
lines changed

2 files changed

+12
-11
lines changed

Lab7/README.md

Lines changed: 11 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -2,25 +2,25 @@
22

33
## Introduction
44

5-
In this lab, you will write a llvm pass in `llvm-pass/afl-demo-pass.so.cc` and `llvm-pass/afl-demo-rt.o.c`, and enable AFL++ to detect command injection vulnerabilities.
5+
In this lab, you will write a LLVM pass in `llvm-pass/afl-demo-pass.so.cc` and `llvm-pass/afl-demo-rt.o.c`, and enable AFL++ to detect command injection vulnerabilities.
66

7-
## Environment (Important!!!)
7+
## Environment (Important.)
88

99
1. x86_64 machine
10-
2. ubuntu 22.04 / 24.04
10+
2. Ubuntu 24.04
1111
3. llvm-14
1212

1313
## Requirement
1414

15-
**(100%)** In this lab, you will write a llvm pass in `llvm-pass/afl-demo-pass.so.cc` & `llvm-pass/afl-demo-rt.o.c` and satisfy following requirements.
16-
1. When running afl++ to fuzz `program`, `program` can't crash by `system("echo AAA");` at line 34 in `program.c`. It's not command injection and you will see below error message when you try to fuzz:
15+
**(100%)** In this lab, you will write a LLVM pass in `llvm-pass/afl-demo-pass.so.cc` & `llvm-pass/afl-demo-rt.o.c` and satisfy the following requirements.
16+
1. When running afl++ to fuzz `program`, `program` can't crash by `system("echo AAA");` at line 34 in `program.c`. It's not command injection, and you will see the error message below when you try to fuzz:
1717
```
1818
[-] PROGRAM ABORT : We need at least one valid input seed that does not crash!
1919
```
20-
Of course, you can not just detect this line to avoid it. We will change this command and add more system functions (which won't cause command injection) in `program.c` when testing your fuzzer.
21-
2. When running afl++ to fuzz `program`, fuzzer need to find the command injection `system(cmd);` at line 18 in `program.c`.
20+
Of course, you can not just detect this line to avoid it. We will modify this command and add additional system functions (which won't cause command injection) in `program.c` during testing with your fuzzer.
21+
2. When running afl++ to fuzz `program`, the fuzzer needs to find the command injection `system(cmd)` at line 18 in `program.c`.
2222
3. Write a report in `report.md` to explain your work
23-
4. Fill Name and ID, and copy crash fuzzer report and crash input (use `xxd`) in `report.md`.
23+
4. Fill Name and ID, and copy the crash fuzzer report and crash input (use `xxd`) in `report.md`.
2424
e.g.
2525
Crash Fuzzer Report:
2626
```
@@ -58,5 +58,6 @@ In this lab, you will write a llvm pass in `llvm-pass/afl-demo-pass.so.cc` and `
5858
5959
## Submission
6060
61-
1. Write a report in `report.md` to explain your work
62-
2. You need to commit and push the corresponding changes to your repository, which contains the code that satisfies the aforementioned requirements.
61+
1. Write a report in `report.md` to explain your work.
62+
2. You must submit these two files `llvm-pass/afl-demo-pass.so.cc` and `llvm-pass/afl-demo-rt.o.c`.
63+
3. You need to commit and push the corresponding changes to your repository, which contains the code that satisfies the aforementioned requirements.

Lab7/report.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
Name:
22
Student ID:
33

4-
## Explaination of your work
4+
## Explanation of your work
55

66

77
### Crash Fuzzer Report

0 commit comments

Comments
 (0)