aeg-pipeline.md (439B)
1 +++ 2 title = 'AEG pipeline' 3 +++ 4 # AEG pipeline 5 AEG: automated exploit generation 6 7 Multiple stages: 8 1. find bugs: 0-day, n-day 9 2. vulnerability specification: what kind? Inputs? depends on something? 10 3. primitives generator: read, write, massage... 11 4. surface explorer: power of primitive, constraints, reach (which bytes end up in interesting places) 12 5. side effects: any bad effects? 13 6. compiler for gadgets in binary 14 7. resulting exploit