LibFuzzer

LibFuzzer

LLVM Project
ToothPicker

ToothPicker

Secure Mobile Networking Lab
+
+

Related Products

  • Parasoft
    152 Ratings
    Visit Website
  • QA Wolf
    273 Ratings
    Visit Website
  • MuukTest
    34 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website
  • AuthorityTech
    2 Ratings
    Visit Website
  • Orca Security
    635 Ratings
    Visit Website
  • Bluepear
    68 Ratings
    Visit Website
  • SDS Manager
    4 Ratings
    Visit Website
  • TIMi
    68 Ratings
    Visit Website
  • DXcharts
    28 Ratings
    Visit Website

About

LibFuzzer is an in-process, coverage-guided, evolutionary fuzzing engine. LibFuzzer is linked with the library under test, and feeds fuzzed inputs to the library via a specific fuzzing entry point (or target function); the fuzzer then tracks which areas of the code are reached, and generates mutations on the corpus of input data in order to maximize the code coverage. The code coverage information for libFuzzer is provided by LLVM’s SanitizerCoverage instrumentation. LibFuzzer is still fully supported in that important bugs will get fixed. The first step in using libFuzzer on a library is to implement a fuzz target, a function that accepts an array of bytes and does something interesting with these bytes using the API under test. Note that this fuzz target does not depend on libFuzzer in any way so it is possible and even desirable to use it with other fuzzing engines like AFL and/or Radamsa.

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows Supported
Mac Not Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported

Audience

Users requiring a fuzzing engine to analyze their code and applications

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

LLVM Project
Founded: 2003
llvm.org/docs/LibFuzzer.html

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

afl-unicorn

afl-unicorn

Battelle

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Atheris

Atheris

Google
Atheris

Atheris

Google
Jazzer

Jazzer

Code Intelligence
Jazzer

Jazzer

Code Intelligence
Honggfuzz

Honggfuzz

Google
syzkaller

syzkaller

Google
Honggfuzz

Honggfuzz

Google

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

Atheris Supported
C Supported
C++ Supported
ClusterFuzz Supported
Fuzzbuzz Supported
Google ClusterFuzz Supported
Jazzer Supported
Python Not Supported

Integrations

Atheris Not Supported
C Not Supported
C++ Not Supported
ClusterFuzz Not Supported
Fuzzbuzz Not Supported
Google ClusterFuzz Not Supported
Jazzer Not Supported
Python Supported
Claim LibFuzzer and update features and information
Claim LibFuzzer and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information