ToothPicker

ToothPicker

Secure Mobile Networking Lab
+
+

Related Products

  • Crowdin
    944 Ratings
    Visit Website
  • PBRS Power BI Reports Distribution
    12 Ratings
    Visit Website
  • Okyline
    2 Ratings
    Visit Website
  • Codemagic
    138 Ratings
    Visit Website
  • Cerberus FTP Server
    159 Ratings
    Visit Website
  • DataImpulse
    31 Ratings
    Visit Website
  • MOVEit
    625 Ratings
    Visit Website
  • TheBestPDF
    39,558 Ratings
    Visit Website
  • JSCAPE MFT Server
    188 Ratings
    Visit Website
  • ClickLearn
    67 Ratings
    Visit Website

About

APIFuzzer reads your API description and step-by-step fuzzes the fields to validate if your application can cope with the fuzzed parameters, and it does not require coding. Parse API definition from a local file or remote URL. JSON and YAML file format support. All HTTP methods are supported. Fuzzing of the request body, query string, path parameter, and request header is supported. Relies on random mutations and supports CI integration. Generate JUnit XML test report format. Send a request to an alternative URL. Support HTTP basic auth from the configuration. Save the report of the failed test in JSON format into the pre-configured folder.

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported

Audience

Anyone looking for a fuzzing solution to validate the parameters of their applications

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

PyPI
pypi.org/project/APIFuzzer/

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

Echidna

Echidna

Crytic

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
go-fuzz

go-fuzz

dvyukov
Atheris

Atheris

Google
Jazzer

Jazzer

Code Intelligence
Peach Fuzzer

Peach Fuzzer

Peach Tech
syzkaller

syzkaller

Google
LibFuzzer

LibFuzzer

LLVM Project
Honggfuzz

Honggfuzz

Google

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

Python Supported
API Blueprint Supported
Arize Phoenix Supported
BudgetML Supported
CircleCI Supported
Git Supported
GitHub Supported
GraphQL Supported
JSON Supported
JUnit Supported
OneDev Supported
OpenAPIHub Supported
Spark NLP Supported
Swagger Supported
XML Supported

Integrations

Python Supported
API Blueprint Not Supported
Arize Phoenix Not Supported
BudgetML Not Supported
CircleCI Not Supported
Git Not Supported
GitHub Not Supported
GraphQL Not Supported
JSON Not Supported
JUnit Not Supported
OneDev Not Supported
OpenAPIHub Not Supported
Spark NLP Not Supported
Swagger Not Supported
XML Not Supported
Claim APIFuzzer and update features and information
Claim APIFuzzer and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information