AFL fuzzing coverage CFG visualization
The utility is based on angr, tracer, shellphish-qemu, bingraphvis and cfg-explorer.
This project is in its very early stage!
$ python -m aflcov /your/binary /path/to/afl/fuzz/queue
The command above will build the CFG, run the executable for each of the queue files through qemu to collect trace info, calculates the node coverage, and display it on the CFG.
- see limitations of cfg-explorer
