Echidna

Echidna

Crytic
+

Related Products

  • Parasoft
    142 Ratings
    Visit Website
  • MuukTest
    34 Ratings
    Visit Website
  • Aikido Security
    224 Ratings
    Visit Website
  • ZeroPath
    2 Ratings
    Visit Website
  • Jscrambler
    38 Ratings
    Visit Website
  • Feroot
    27 Ratings
    Visit Website
  • JetBrains Junie
    12 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website
  • qTest
    Visit Website
  • NMI Payments
    109 Ratings
    Visit Website

About

Our platform uses various security techniques, including coverage-guided and feedback-based fuzz testing, to automatically generate millions of test cases that trigger hard-to-find bugs deep within your application. This white-box approach protects against edge cases and speeds up development. Advanced fuzzing engines generate inputs that maximize code coverage. Powerful bug detectors check for errors during code execution. Uncover true vulnerabilities only. Get the input and stack trace as proof, so you can reliably reproduce errors every time. AI white-box testing uses data from all previous test runs to continuously learn the inner-workings of your application, triggering security-critical bugs with increasingly high precision.

About

Echidna is a Haskell program designed for fuzzing/property-based testing of Ethereum smart contracts. It uses sophisticated grammar-based fuzzing campaigns based on a contract ABI to falsify user-defined predicates or Solidity assertions. We designed Echidna with modularity in mind, so it can be easily extended to include new mutations or test specific contracts in specific cases. Generates inputs tailored to your actual code. Optional corpus collection, mutation and coverage guidance to find deeper bugs. Powered by Slither to extract useful information before the fuzzing campaign. Source code integration to identify which lines are covered after the fuzzing campaign. Interactive terminal UI, text-only or JSON output. Automatic test case minimization for quick triage. Seamless integration into the development workflow. Maximum gas usage reporting of the fuzzing campaign. Support for a complex contract initialization with Etheno and Truffle.

About

Fuzzing is a powerful strategy to find bugs in software. The idea is quite simple, which is to generate a large number of randomly malformed inputs for the software to parse and see what happens. If the program crashes then something is likely wrong. While fuzzing is a well-known strategy, it is surprisingly easy to find bugs, often with security implications, in widely used software. Memory access errors are the errors most likely to be exposed when fuzzing software that is written in C/C++. While they differ in the details, the core problem is often the same, the software reads or writes to the wrong memory locations. A modern Linux or BSD system ships a large number of basic tools that do some kind of file displaying and parsing. In their current state, most of these tools are not suitable for untrusted inputs. On the other hand, we have powerful tools these days that allow us to find and analyze these bugs.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Developers interested in an automated application security solution

Audience

Programmers interested in a tool providing an Ethereum smart contract fuzzer

Audience

Developers and anyone in need of a tool to improve the security of their software applications

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version
Free Trial

Pricing

Free
Free Version
Free Trial

Pricing

Free
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

Code Intelligence
Germany
www.code-intelligence.com

Company Information

Crytic
github.com/crytic/echidna

Company Information

Fuzzing Project
fuzzing-project.org

Alternatives

go-fuzz

go-fuzz

dvyukov

Alternatives

LibFuzzer

LibFuzzer

LLVM Project

Alternatives

Mayhem

Mayhem

ForAllSecure
go-fuzz

go-fuzz

dvyukov
LibFuzzer

LibFuzzer

LLVM Project
Peach Fuzzer

Peach Fuzzer

Peach Tech
ClusterFuzz

ClusterFuzz

Google
CI Fuzz

CI Fuzz

Code Intelligence
go-fuzz

go-fuzz

dvyukov
Atheris

Atheris

Google

Categories

Categories

Categories

Application Security Features

Analytics / Reporting
Open Source Component Monitoring
Source Code Analysis
Third-Party Tools Integration
Training Resources
Vulnerability Detection
Vulnerability Remediation

Integrations

C
C++
CLion
Docker
Etheno
Ethereum
GitHub
GitLab
Go
Gradle
Haskell
Homebrew
JSON
Jenkins
Jira
Kubernetes
Travis CI
Vim
Visual Basic

Integrations

C
C++
CLion
Docker
Etheno
Ethereum
GitHub
GitLab
Go
Gradle
Haskell
Homebrew
JSON
Jenkins
Jira
Kubernetes
Travis CI
Vim
Visual Basic

Integrations

C
C++
CLion
Docker
Etheno
Ethereum
GitHub
GitLab
Go
Gradle
Haskell
Homebrew
JSON
Jenkins
Jira
Kubernetes
Travis CI
Vim
Visual Basic
Claim Code Intelligence and update features and information
Claim Code Intelligence and update features and information
Claim Echidna and update features and information
Claim Echidna and update features and information
Claim Fuzzing Project and update features and information
Claim Fuzzing Project and update features and information