Mayhem

Mayhem

ForAllSecure
ToothPicker

ToothPicker

Secure Mobile Networking Lab
+
+

Related Products

  • MuukTest
    34 Ratings
    Visit Website
  • Checksum.ai
    2 Ratings
    Visit Website
  • Parasoft
    152 Ratings
    Visit Website
  • Virtuoso QA
    131 Ratings
    Visit Website
  • QA Wolf
    273 Ratings
    Visit Website
  • Gearset
    305 Ratings
    Visit Website
  • Astra Pentest
    296 Ratings
    Visit Website
  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Polonious
    2 Ratings
    Visit Website
  • TrustInSoft Analyzer
    6 Ratings
    Visit Website

About

Advanced fuzzing solution that combines guided fuzzing with symbolic execution, a patented technology from CMU. Mayhem is an advanced fuzz testing solution that dramatically reduces manual testing efforts with autonomous defect detection and validation. Deliver safe, secure, reliable software with less time, cost, and effort. Mayhem’s unique advantage is in its ability to acquire intelligence of its targets over time. As Mayhem’s knowledge grows, it deepens its analysis and maximizes its code coverage. All reported vulnerabilities are exploitable, confirmed risks. Mayhem guides remediation efforts with in-depth system level information, such as backtraces, memory logs, and register state, expediting issue diagnosis and fixes. Mayhem utilizes target feedback to custom generate test cases on the fly -- meaning no manual test case generation required. Mayhem offers access to all of its test cases to make regression testing effortless and continuous.

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows Not Supported
Mac Not Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported

Audience

Enterprisesses, comercial or government organizations interested in DevSecOps security applications

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Supported
Live Online Supported
In Person Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

ForAllSecure
Founded: 2012
United States
www.forallsecure.com

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Atheris

Atheris

Google
Jazzer

Jazzer

Code Intelligence
CourtCaseFinder.com

CourtCaseFinder.com

Court Case Finder
syzkaller

syzkaller

Google
ClusterFuzz

ClusterFuzz

Google
Honggfuzz

Honggfuzz

Google

Categories

Automated Testing Supported
Code Coverage Supported
Fuzz Testing Supported
Regression Testing Supported

Categories

Fuzz Testing Supported

Automated Testing Features

Hierarchical View Not Supported
Move & Copy Not Supported
Parameterized Testing Not Supported
Requirements-Based Testing Not Supported
Security Testing Supported
Supports Parallel Execution Not Supported
Test Script Reviews Not Supported
Unicode Compliance Not Supported

Integrations

Bamboo Supported
Docker Supported
Drone Supported
Google Cloud Platform Supported
Jenkins Supported
Okta Supported
Python Not Supported
Slack Supported
Travis CI Supported

Integrations

Bamboo Not Supported
Docker Not Supported
Drone Not Supported
Google Cloud Platform Not Supported
Jenkins Not Supported
Okta Not Supported
Python Supported
Slack Not Supported
Travis CI Not Supported
Claim Mayhem and update features and information
Claim Mayhem and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information