You can download and visualize instruction-level coverage from the fuzzer in BinaryNinja using the Lighthouse plugin. This visualization helps pinpoint areas where the fuzzer may be stalling, allowing you to address potential issues through binary patching (see )

1. Download the Coverage Data

On the Run Page, click the Download button within the Coverage section.
Image without caption

2. Load Coverage in BinaryNinja

Open the firmware under test in BinaryNinja. Then, from the menu, select Plugins > Lighthouse > Load coverage file...
Image without caption

3. Review the Highlighted Coverage

Once loaded, the instructions that were executed will be highlighted within BinaryNinja:
Image without caption
💡
Coverage data is periodically updated by the fuzzer as it traces inputs that trigger new coverage, meaning the file represents a lower-bound approximation of your firmware's instruction-level coverage.