Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

Mayhem is an innovative fuzz testing platform that integrates guided fuzzing with symbolic execution, leveraging a patented technology developed at CMU. This sophisticated solution significantly minimizes the need for manual testing by autonomously detecting and validating defects in software. By facilitating the delivery of safe, secure, and reliable software, it reduces the time, cost, and effort typically required. One of Mayhem's standout features is its capability to gather intelligence about its targets over time; as its understanding evolves, it enhances its analysis and maximizes overall code coverage. Every vulnerability identified is an exploitable and confirmed risk, enabling teams to prioritize their efforts effectively. Furthermore, Mayhem aids in remediation by providing comprehensive system-level insights, including backtraces, memory logs, and register states, which expedite the diagnosis and resolution of issues. Its ability to generate custom test cases in real-time, based on target feedback, eliminates the need for any manual test case creation. Additionally, Mayhem ensures that all generated test cases are readily accessible, making regression testing not only effortless but also a continuous and integral part of the development process. This seamless integration of automated testing and intelligent feedback sets Mayhem apart in the realm of software quality assurance.

Description

ToothPicker serves as an innovative in-process, coverage-guided fuzzer specifically designed for iOS, focusing on the Bluetooth daemon and various Bluetooth protocols. Utilizing FRIDA as its foundation, this tool can be tailored to function on any platform compatible with FRIDA. The repository also features an over-the-air fuzzer that showcases an example implementation for fuzzing Apple's MagicPairing protocol through InternalBlue. Furthermore, it includes the ReplayCrashFile script, which aids in confirming any crashes identified by the in-process fuzzer. This simple fuzzer operates by flipping bits and bytes in inactive connections, lacking coverage or injection, yet it serves effectively as a demonstration and is stateful. It requires only Python and Frida to operate, eliminating the need for additional modules or installations. Built upon the frizzer codebase, it's advisable to establish a virtual Python environment for optimal performance with frizzer. Notably, with the introduction of the iPhone XR/Xs, the PAC (Pointer Authentication Code) feature has been implemented. This advancement underscores the necessity for continuous adaptation of fuzzing tools like ToothPicker to keep pace with evolving iOS security measures.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Bamboo
Docker
Drone
Google Cloud Platform
Jenkins
Okta
Python
Slack
Travis CI

Integrations

Bamboo
Docker
Drone
Google Cloud Platform
Jenkins
Okta
Python
Slack
Travis CI

Pricing Details

No price information available.
Free Trial
Free Version

Pricing Details

Free
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

ForAllSecure

Founded

2012

Country

United States

Website

www.forallsecure.com

Vendor Details

Company Name

Secure Mobile Networking Lab

Website

github.com/seemoo-lab/toothpicker

Product Features

Automated Testing

Hierarchical View
Move & Copy
Parameterized Testing
Requirements-Based Testing
Security Testing
Supports Parallel Execution
Test Script Reviews
Unicode Compliance

Product Features

Alternatives

Alternatives

Atheris Reviews

Atheris

Google
LibFuzzer Reviews

LibFuzzer

LLVM Project
Sahi Pro Reviews

Sahi Pro

Tyto Software Pvt Ltd
syzkaller Reviews

syzkaller

Google
Jazzer Reviews

Jazzer

Code Intelligence