Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Echidna is a Haskell-based tool created for fuzzing and property-based testing of Ethereum smart contracts. It employs advanced grammar-driven fuzzing strategies that leverage a contract's ABI to challenge user-defined predicates or Solidity assertions. Designed with a focus on modularity, Echidna allows for easy extensions to incorporate new mutations or to target specific contracts under particular conditions. The tool generates inputs that are specifically adapted to your existing codebase, and it offers optional features for corpus collection, mutation, and coverage guidance to uncover more elusive bugs. It utilizes Slither to extract critical information prior to launching the fuzzing process, ensuring a more effective campaign. With source code integration, Echidna can pinpoint which lines of code are exercised during testing, and it provides an interactive terminal UI along with text-only or JSON output formats. Additionally, it includes automatic test case minimization for efficient triage and integrates seamlessly into the development workflow. The tool also reports maximum gas usage during fuzzing activities and supports complex contract initialization through Etheno and Truffle, enhancing its usability for developers. Ultimately, Echidna stands out as a robust solution for ensuring the reliability and security of Ethereum smart contracts.

Description

Without access to source code, discover and certify security weaknesses in any product. Any protocol or hardware can be tested with beSTORM. This includes those used in IoT and process control, CANbus-compatible automotive and aerospace. Realtime fuzzing is possible without needing access to the source code. There are no cases to download. One platform, one GUI to use, with more than 250+ pre-built protocol testing modules, and the ability to create custom and proprietary ones. Identify security flaws before deployment. These are the ones that are most commonly discovered by outside actors after release. In your own testing center, certify vendor components and your applications. Software module self-learning and propriety testing. Scalability and customization for all business sizes. Automate the generation and delivery of near infinite attack vectors. Also, document any product failures. Record every pass/fail and manually engineer the exact command that caused each failure.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Docker
Etheno
Ethereum
GitHub
Haskell
Homebrew
JSON
Nix
Solidity

Integrations

Docker
Etheno
Ethereum
GitHub
Haskell
Homebrew
JSON
Nix
Solidity

Pricing Details

Free
Free Trial
Free Version

Pricing Details

$50,000.00/one-time
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Crytic

Website

github.com/crytic/echidna

Vendor Details

Company Name

Beyond Security (Fortra)

Founded

1999

Country

United States

Website

beyondsecurity.com/solutions/bestorm-dynamic-application-security-testing.html

Product Features

Product Features

Automated Testing

Hierarchical View
Move & Copy
Parameterized Testing
Requirements-Based Testing
Security Testing
Supports Parallel Execution
Test Script Reviews
Unicode Compliance

Software Testing

Automated Testing
Black-Box Testing
Dynamic Testing
Issue Tracking
Manual Testing
Quality Assurance Planning
Reporting / Analytics
Static Testing
Test Case Management
Variable Testing Methods
White-Box Testing

Alternatives

LibFuzzer Reviews

LibFuzzer

LLVM Project

Alternatives

Mayhem Reviews

Mayhem

ForAllSecure
Honggfuzz Reviews

Honggfuzz

Google
NeoLoad Reviews

NeoLoad

Tricentis
go-fuzz Reviews

go-fuzz

dvyukov