ToothPicker

ToothPicker

Secure Mobile Networking Lab
+
+

Related Products

  • Parasoft
    152 Ratings
    Visit Website
  • Aikido Security
    364 Ratings
    Visit Website
  • Virtuoso QA
    131 Ratings
    Visit Website
  • Astra Pentest
    296 Ratings
    Visit Website
  • MuukTest
    34 Ratings
    Visit Website
  • Gearset
    305 Ratings
    Visit Website
  • Flagsmith
    43 Ratings
    Visit Website
  • Checksum.ai
    2 Ratings
    Visit Website
  • QA Wolf
    273 Ratings
    Visit Website
  • Epicor Financials
    Visit Website

About

The Fuzzbuzz workflow is very similar to other CI/CD testing workflows. However, unlike other testing workflows, fuzz testing requires multiple jobs to run simultaneously, which results in a few extra steps. Fuzzbuzz is a fuzz testing platform. We make it trivial for developers to add fuzz tests to their code and run them in CI/CD, helping them catch critical bugs and vulnerabilities before they hit production. Fuzzbuzz completely integrates into your environment, following you from the terminal to CI/CD. Write a fuzz test in your environment and use your own IDE, terminal, or build tools. Push to CI/CD and Fuzzbuzz will automatically start running your fuzz tests against your latest code changes. Get notified when bugs are found through Slack, GitHub, or email. Catch regressions as new changes are automatically tested and compared to previous runs. Code is built and instrumented by Fuzzbuzz as soon as a change is detected.

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported

Audience

Developers in search of a solution to add fuzz tests to their code

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Fuzzbuzz
United States
github.com/fuzzbuzz

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

Echidna

Echidna

Crytic

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
go-fuzz

go-fuzz

dvyukov
Atheris

Atheris

Google
ClusterFuzz

ClusterFuzz

Google
Jazzer

Jazzer

Code Intelligence
syzkaller

syzkaller

Google
Honggfuzz

Honggfuzz

Google

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

Python Supported
Bitbucket Supported
C Supported
C++ Supported
Debian Supported
Git Supported
GitHub Supported
GitLab Supported
Go Supported
LibFuzzer Supported
Microsoft Teams Supported
Rust Supported
Slack Supported

Integrations

Python Supported
Bitbucket Not Supported
C Not Supported
C++ Not Supported
Debian Not Supported
Git Not Supported
GitHub Not Supported
GitLab Not Supported
Go Not Supported
LibFuzzer Not Supported
Microsoft Teams Not Supported
Rust Not Supported
Slack Not Supported
Claim Fuzzbuzz and update features and information
Claim Fuzzbuzz and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information