SyzBridge：一款提供了丰富接口的Linux系统安全研究工具

sudo apt-get updatesudo apt-get -y install git python3 python3-pip python3-venv sudogit clone --recurse-submodules https://github.com/seclab-ucr/SyzBridge.gitcd SyzBridge/python3 -m venv venv. venv/bin/activatepython3 -m pip install --upgrade pippip3 install -r requirements.txt

python3 syzbridge build --all

{    "kernel": {        "Upstream":{            # The upstream image and key are generated by syzkaller create-image.sh            # https://github.com/google/syzkaller/blob/master/tools/create-image.sh            "ssh_key":"/projects/SyzBridge/tools/img/stretch.img.key",            "distro_name":"upstream",            "distro_image":"/projects/SyzBridge/tools/img/stretch.img",            "type": "upstream",            "normal_user": "etenal",            "root_user": "root"        },        "Ubuntu-Jammy-22.04":{            # Refer to "Deploy Distro Image" in the wiki            "distro_image":"/vendors/ubuntu/kernel-jammy-22.04-Apr_21_2022/ubuntu-snapshot.img",            "ssh_key":"/.ssh/syzbridge",            "distro_src":"/vendors/ubuntu/kernel-jammy-22.04-Apr_21_2022/ubuntu-jammy",            "distro_name":"ubuntu-22.04",            "distro_code_name": "jammy",            "distro_version": "5.15.25",            # Effective cycle use to pick Syzbot bugs based on their reported date            "effective_cycle_start": "Apr 21 2022",            "effective_cycle_end": "",            "type": "distro",            "normal_user": "etenal",            "root_user": "root"        }    },    "plugin": {        "GoogleSheets": {            "credential": "/tmp/google_sheet.json",            "private_sheet": "ndss_experiment-ubuntu",            "main_sheet": "ndss_experiment"        },        "Syzscope": {            "timeout": 14400,            "max_round": 3,            "repro_mode": "c"        },        "TraceAnalysis": {            "timeout": 600        },        "RawBugReproduce": {            "timeout": 300        },        "BugReproduce": {            "timeout": 300,            "skip_regular_reproduce": false        },        "SyzFeatureMinimize": {            "timeout": 300,            "attempt": 3        }    }}

python3 syzbridge syzbot --proj test --config ./template.cfg --get 380acd1f7d59c28809f18bb577d645aab34d23b0

python3 syzbridge syzbot --proj test --config ./template.cfg --filter-by-kernel=upstream --key=KASAN --filter-by-c-prog

python3 syzbridge syzbot --proj test --config ./template.cfg --filter-by-distro-cycle-end

usage: syzbridge [-h]                 {test,empty,run,image,bitcode,build,poc,syzbot,case,service,fuzz}                 ...positional arguments:  {test,empty,run,image,bitcode,build,poc,syzbot,case,service,validateTrace,fuzz}    test                模块化测试 (仅调试)    empty              创建一个空项目    run                 运行分析    image               构建Linux发行版镜像 [ubuntu|fedora|debian]    bitcode             构建内核bitcode以执行静态分析    build               构建关键组件    poc                 构建PoC    syzbot              通过哈希或包含多个哈希的文件获取测试样例    case                获取测试样例信息    service             持久化运行syzbridge    fuzz                执行模糊测试optional arguments:  -h, --help            显示工具帮助信息和退出

python3 syzbridge run --proj test --config ./template.cfg --syz-feature-minimize --raw-bug-reproduce --trace-analysis --modules-analysis --bug-reproduce