The application provides a kind of
grey box fuzzing test method and
system based on Intel-PT and Syzkaller, method includes: first fuzzing test engine starts test cycle, constantly test and synchronize test progress to manager;Manager sends the new use case found by second fuzzing test engine to first fuzzing test engine in response to the poll request of first fuzzing test engine, the effective
queue of first fuzzing test engine is updated, start to generate new use case and test;First fuzzing test engine sends new use case to executor, executor prepares to execute test;Executor identifies kernel address range before executing test, collects static
storage area of new use case, applies to start PT tracking function by super call;Intercept
control register setting request, obtain the value of
control register, and assign the value of
control register to the parameter of super call, the value of control register is the
page table base address of
tracking system;Process super call to set the kernel address range of tracking, set
page table base address, start PT tracking;Executor starts to parse and execute input use case, real-time call registered
parsing function to complete
parsing, fill in static
storage area;After the execution of multiple rounds of
system call of executor, updated coverage information is synchronized to first fuzzing test engine.The
grey box fuzzing test method and
system based on Intel-PT and Syzkaller provided by the application can be used for closed source version linux system binary
grey box fuzzing test, to form effective feedback information
closed loop.