IntelLabs/kAFL

View on GitHub

A fuzzer for full VM kernel/driver targets

Stars: 814
Forks: 109
Open beginner issues: 0
Indexed issues: 51

Dominant language: Makefile
License: MIT
Last GitHub push: Jan 6, 2026
Latest indexed: Sep 17, 2026
Contributing guide: No contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted good first issue
PR merge metrics: No merged PRs in 30d

Open All

51 open issues indexed

Document ghidra usage Open

good first issue

IntelLabs/kAFL#1 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Redqueen -fix_hashes Open

IntelLabs/kAFL#3 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kafl_gui should warn on common problems Open

good first issue

IntelLabs/kAFL#4 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Documentation Todo Open

documentation good first issue help wanted

IntelLabs/kAFL#126 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Save IP ranges used for fuzzing for later use by processing tools Open

enhancement

IntelLabs/kAFL#128 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Warning: host doesn't support requested feature Open

IntelLabs/kAFL#131 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
broken memory lookup for Q35 and >3.2GB RAM Open

bug help wanted

IntelLabs/kAFL#141 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kAFL nested setup Open

enhancement help wanted

IntelLabs/kAFL#142 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Any documents to show how to use "kafl cov"? Open

documentation

IntelLabs/kAFL#145 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Generate VM dumps for offline debugging with crash util Open

enhancement help wanted

IntelLabs/kAFL#147 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
cleanup workdir files Open

enhancement

IntelLabs/kAFL#148 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
deploy: replace nyx_packer by vmcall tooling Open

IntelLabs/kAFL#158 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
pipe target output to hcat show nothing Open

IntelLabs/kAFL#172 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Cleanup stable-v0.5 branch Open

IntelLabs/kAFL#184 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kafl debug can't step into shared library Open

IntelLabs/kAFL#188 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
how to use the payload Open

IntelLabs/kAFL#191 · 5 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kAFL/Nyx alignment Open

IntelLabs/kAFL#192 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Nyx-testing hangs after update on latest kAFL kernel Open

IntelLabs/kAFL#198 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[UEFI] ERR: TNT 483 at position <0x0fabcf17,0x0fabcf17> Open

IntelLabs/kAFL#204 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add support for VMware port IO backdoor as secondary hypercall interface Open

IntelLabs/kAFL#208 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Redqueen doesn't handle strcmp() calls on linux userspace target Open

IntelLabs/kAFL#212 · 10 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
fuzzing for drivers that are loaded only when a particular process is running Open

IntelLabs/kAFL#224 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Docs: How to fuzz multiple drivers and configure multiple Intel PT tracing (IP0-IP3) in kAFL Open

documentation

IntelLabs/kAFL#229 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Can I directly know which Payload caused each crash without run debug all payloads? Open

IntelLabs/kAFL#231 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Script / tooling around HYPERCALL_KAFL_LOCK to snapshot a VM Open

enhancement

IntelLabs/kAFL#232 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Document ghidra tag Open

documentation

IntelLabs/kAFL#235 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
TNT decoder returned: decoder_error Open

IntelLabs/kAFL#236 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kAFL 0.7+nyx Sleep() function issue :( Open

IntelLabs/kAFL#252 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Remote virt-viewer and provisioning Open

IntelLabs/kAFL#260 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
issue about windows kernel File IO Open

IntelLabs/kAFL#262 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Memory Leak(?) problem with usermode harness Open

IntelLabs/kAFL#271 · 9 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
How do I use SUBMIT_CR3 to trace another process's coverage Open

IntelLabs/kAFL#277 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Why Hyper-V doesn't work in nyx 6.8 kernel? Open

IntelLabs/kAFL#290 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
how to debug win10 driver crash? Open

IntelLabs/kAFL#296 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Tutorial for kafl-fuzz with qemu image Open

IntelLabs/kAFL#299 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
It looks agent_non_reload_mode doesn`t work Open

IntelLabs/kAFL#300 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
When some workers are STALLED, the value of CurExec is wrong Open

IntelLabs/kAFL#302 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
hi, i am not sure what does host payload size too large means? Open

IntelLabs/kAFL#305 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
No harness for Linux Kernel target Open

IntelLabs/kAFL#308 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
kAFL looks like not exploring enough payload size Open

IntelLabs/kAFL#313 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Doc: add GIT_SSL_NO_VERIFY when QEMU clone fail Open

IntelLabs/kAFL#315 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Cannot fuzz with win11 vm Open

IntelLabs/kAFL#317 · 7 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Possible Thread Starvation Issue in QEMU-NYX DWM Fuzzing Open

IntelLabs/kAFL#326 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
KAFL cannot find Intel-PT Open

IntelLabs/kAFL#330 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Cannot Build Windows VM Template Open

IntelLabs/kAFL#331 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
[Question/Discussion] Strategy for Fuzzing with VFIO Device Passthrough (e.g., GPU) and Snapshot Conflict Open

IntelLabs/kAFL#332 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Visual studio harness compilation Open

IntelLabs/kAFL#335 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Crash exec_result_code can be overwritten by the normal sync page_not_found path before host samling, causing real crashes to be reported as regular Open

IntelLabs/kAFL#345 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Visual studio fails with windows template. Open

IntelLabs/kAFL#347 · 8 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Ignore non-kernel crashes? Open

IntelLabs/kAFL#348 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026

IntelLabs/kAFL

Get new issues in your inbox