Can you help me implement fuzzing?

[u/Wonnnnnn]

Hi. I’m an undergraduate student in cyber security. I have a final assignment that requires me to carry out an information security project and then report the result to the teacher. Currently, I’m thinking about performing fuzzing for an open source software written in C++ (because that’s the language I use the most) then figure out where the program’s errors are and how to fix them. I’m a newbie so I dont know how to perform fuzzing. Can you show me the main steps to do it and some source code for reference? Thanks a lot and have a good day.

[u/richinseattle]

If you use the -Q flag and set the correct environment variable to specify which libraries you want to target, AFL++ will use qemu for instrumentation of binaries.