Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Radamsa serves as a robust test case generator specifically designed for robustness testing and fuzzing, aimed at evaluating how resilient a program is against malformed and potentially harmful inputs. By analyzing sample files containing valid data, it produces a variety of uniquely altered outputs that challenge the software's stability. One of the standout features of Radamsa is its proven track record in identifying numerous bugs in significant programs, alongside its straightforward scriptability and ease of deployment. Fuzzing, a key technique in uncovering unexpected program behaviors, involves exposing the software to a wide range of input types to observe the resultant actions. This process is divided into two main components: sourcing the diverse inputs and analyzing the outcomes, with Radamsa effectively addressing the first component, while a brief shell script generally handles the latter. Testers often possess a general understanding of potential failures and aim to validate whether those concerns are warranted through this method. Ultimately, Radamsa not only simplifies the testing process but also enhances the reliability of software applications by revealing hidden vulnerabilities.
Description
ToothPicker serves as an innovative in-process, coverage-guided fuzzer specifically designed for iOS, focusing on the Bluetooth daemon and various Bluetooth protocols. Utilizing FRIDA as its foundation, this tool can be tailored to function on any platform compatible with FRIDA. The repository also features an over-the-air fuzzer that showcases an example implementation for fuzzing Apple's MagicPairing protocol through InternalBlue. Furthermore, it includes the ReplayCrashFile script, which aids in confirming any crashes identified by the in-process fuzzer. This simple fuzzer operates by flipping bits and bytes in inactive connections, lacking coverage or injection, yet it serves effectively as a demonstration and is stateful. It requires only Python and Frida to operate, eliminating the need for additional modules or installations. Built upon the frizzer codebase, it's advisable to establish a virtual Python environment for optimal performance with frizzer. Notably, with the introduction of the iPhone XR/Xs, the PAC (Pointer Authentication Code) feature has been implemented. This advancement underscores the necessity for continuous adaptation of fuzzing tools like ToothPicker to keep pace with evolving iOS security measures.
API Access
Has API
API Access
Has API
Pricing Details
Free
Free Trial
Free Version
Pricing Details
Free
Free Trial
Free Version
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Deployment
Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Customer Support
Business Hours
Live Rep (24/7)
Online Support
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Types of Training
Training Docs
Webinars
Live Training (Online)
In Person
Vendor Details
Company Name
Aki Helin
Website
gitlab.com/akihe/radamsa
Vendor Details
Company Name
Secure Mobile Networking Lab
Website
github.com/seemoo-lab/toothpicker