A Linux Kernel Module that implements a fast snapshot mechanism for fuzzing.

Based on https://github.com/sslab-gatech/perf-fuzz.

Written and maintained by Nick "kallsyms" Gregory and Andrea Fioraldi.

fork() is slow and we want to fuzz faster. The speed gain currently varies between 1-20% depending on the taget, but this is WIP to be faster.

If your application is stateful, persistent mode in llvm_mode will give you a better performance though.

Just make.

Load it using ./load.sh, unload it using ./unload.sh.

While the module is loaded, AFL++ will detect it and automatically switch from fork() to snapshot mode. (Note: currently llvm_mode only, available from v2.63c onwards)

• switch from kprobe to ftrace for hooking (faster)
• implement pages blacklist/whitelist
• API for fine grained snapshotting (e.g. add a new VMA outside the whitelist)
• support for multithreaded applications