Honggfuzz

Honggfuzz

Google
ToothPicker

ToothPicker

Secure Mobile Networking Lab
+
+

Related Products

  • Digital WarRoom
    55 Ratings
    Visit Website
  • Forethought
    166 Ratings
    Visit Website
  • Gushwork
    29 Ratings
    Visit Website
  • AlsoThere
    1 Rating
    Visit Website
  • TradingView Stock Widgets
    16 Ratings
    Visit Website
  • WinningBidder.com
    165 Ratings
    Visit Website
  • Filerev
    3 Ratings
    Visit Website
  • Striven
    234 Ratings
    Visit Website
  • Bluepear
    70 Ratings
    Visit Website
  • Fax.Cloud
    1 Rating
    Visit Website

About

Honggfuzz is a security-oriented software fuzzer. Supports evolutionary, feedback-driven fuzzing based on code coverage (SW and HW-based). It’s multi-process and multi-threaded, there’s no need to run multiple copies of your fuzzer, as Honggfuzz can unlock the potential of all your available CPU cores with a single running instance. The file corpus is automatically shared and improved between all fuzzed processes. It’s blazingly fast when the persistent fuzzing mode is used. A simple/empty LLVMFuzzerTestOneInput function can be tested with up to 1mo iteration per second on a relatively modern CPU. Has a solid track record of uncovered security bugs, the only (to date) vulnerability in OpenSSL with the critical score mark was discovered by Honggfuzz. As opposed to other fuzzers, it will discover and report hijacked/ignored signals from crashes (intercepted and potentially hidden by a fuzzed program).

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported

Audience

Anyone requiring a solution to detect coding errors and security vulnerabilities

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Google
United States
github.com/google/honggfuzz

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

LibFuzzer

LibFuzzer

LLVM Project

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Atheris

Atheris

Google
Atheris

Atheris

Google
Jazzer

Jazzer

Code Intelligence
syzkaller

syzkaller

Google
go-fuzz

go-fuzz

dvyukov
Honggfuzz

Honggfuzz

Google

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

ClusterFuzz Supported
Cygwin Supported
FreeBSD Supported
Google ClusterFuzz Supported
NetBSD Supported
OpenSSL Supported
Python Not Supported

Integrations

ClusterFuzz Not Supported
Cygwin Not Supported
FreeBSD Not Supported
Google ClusterFuzz Not Supported
NetBSD Not Supported
OpenSSL Not Supported
Python Supported
Claim Honggfuzz and update features and information
Claim Honggfuzz and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information