20 lines
405 B
Markdown
20 lines
405 B
Markdown
|
# Substrate WASM fuzzer
|
||
|
|
|
||
|
|
Community project for fuzzing WASM in Substrate.
|
||
|
|
|
||
|
|
Attack model: Attacker payload -> TX -> WASM Execution
|
||
|
|
|
||
|
|
|
||
|
|
## Example
|
||
|
|
# ./wasmfuzz -f <func> -n <n> -c <contract-file.wasm> -i <fuzzinput>
|
||
|
|
|
||
|
|
|
||
|
|
## Dev tasks
|
||
|
|
- Fuzzer logic/engine
|
||
|
|
- Fuzzer input
|
||
|
|
|
||
|
|
## Good question
|
||
|
|
Why don't we just use AFL? We could inject from TX entry func...
|
||
|
|
https://github.com/rust-fuzz/afl.rs
|
||
|
|
https://aflplus.plus/
|