afl fuzz (odd, check syntax)

[greg123]

I am trying to fuzz bash and I am fuzzing bash but it gives me this warning "(odd, check syntax)"

Here are the commands I have used https://github.com/tunz/afl-fuzz-js/blob/master/experimental/bash_harness/bash-harness.c

[cooper]

SO thinks your test harness isn't consuming the fuzzing input

Maybe you should state the full error/warning.

[digininja]

Bash and Openssl are huge projects that have been fuzzed to death, find tutorials on smaller projects with known issues and learn to fuzz them, you will gain nothing useful from having an app running for multiple hours and finding nothing. Even if it finds something, bash is so complex that trying to work out if it is exploitable or not will be out of your skill level at the moment.

Search for all inclusive tutorials, ones that take you through the whole process on apps that have known issues. Work from the fuzz through the research and then the exploit dev, If you don't do the last few steps then the fuzzing is a waste of time, all you've managed to do is to prove an app will fall over.