You can download and visualize instruction-level coverage from the fuzzer in BinaryNinja using the Lighthouse plugin. This visualization helps pinpoint areas where the fuzzer may be stalling, allowing you to address potential issues through binary patching (see ‣)
1. Download the Coverage Data
On the Run Page, click the
Download
button within the Coverage section.2. Load Coverage in BinaryNinja
Open the firmware under test in BinaryNinja. Then, from the menu, select
Plugins > Lighthouse > Load coverage file...
3. Review the Highlighted Coverage
Once loaded, the instructions that were executed will be highlighted within BinaryNinja:
Coverage data is periodically updated by the fuzzer as it traces inputs that trigger new coverage, meaning the file represents a lower-bound approximation of your firmware's instruction-level coverage.