Skip to content
STIMSMITH

Mishegos

Tool
First seen 6/9/2026
Last seen 6/9/2026
Evidence 5 chunks

NEIGHBORHOOD

18 nodes · 23 edges
graph · Mishegos · depth=1

RELATIONSHIPS

17 connections
libbfd evaluates → 100% 2e
Mishegos evaluates libbfd as one of its fuzzing worker targets.
XED evaluates → 100% 2e
Mishegos evaluates XED as one of its fuzzing worker targets.
Zydis evaluates → 100% 2e
Mishegos evaluates Zydis as one of its fuzzing worker targets.
decoder discrepancy introduces → 95% 2e
Mishegos discovers and reports decoder discrepancies between different x86_64 decoder implementations.
x86_64 instruction decoding evaluates → 100% 2e
Mishegos is a differential fuzzer specifically targeting x86_64 instruction decoders.
mishegos worker ← part of 95% 2e
Mishegos is composed of worker processes, each wrapping a decoder target with a defined ABI.
cohort output uses → 95% 2e
Mishegos organizes decoder outputs into cohorts for analysis.
Differential Fuzzing implements → 100% 2e
Mishegos is described as a differential fuzzer for x86_64 instruction decoders, integrating the sliding mutation approach into a differential fuzzing scheme.
passes.yml ← part of 90% 1e
passes.yml is the configuration file for analysis passes in Mishegos.
Trail of Bits authored by → 95% 1e
Mishegos is open-sourced by Trail of Bits.
sliding mutation engine implements → 100% 1e
Mishegos uses the sliding mutation engine to generate x86_64 instruction candidates by extracting windows of up to 15 bytes.
shared memory slot uses → 95% 1e
Mishegos uses shared memory slots to pass inputs to workers and collect outputs.
worker process ABI uses → 95% 1e
Each fuzzing target in Mishegos is wrapped into a worker process with a well-defined ABI.
analysis pass uses → 90% 1e
Mishegos's analysis tool organizes filters into passes to process output cohorts.
analysis filter uses → 90% 1e
Mishegos uses analysis filters as small scripts to process and filter cohort output.
input minimization uses → 90% 1e
Mishegos includes a minimize-input filter that reduces instruction candidates to the minimal relevant length.
mishmat uses → 95% 1e
Mishegos uses mishmat to visualize analysis output as HTML tables.