ToothPicker

ToothPicker

Secure Mobile Networking Lab
ToothPicker Wfuzz

Related Products

  • VKS
    4.5 out of 5 stars 26 Ratings
    Visit Website for VKS
  • LM-Kit.NET
    4.8 out of 5 stars 29 Ratings
    Visit Website for LM-Kit.NET
  • GoCodes
    4.4 out of 5 stars 275 Ratings
    Visit Website for GoCodes
  • Boostero
    4.2 out of 5 stars 65 Ratings
    Visit Website for Boostero
  • QuantaStor
    4.8 out of 5 stars 6 Ratings
    Visit Website for QuantaStor
  • QA Wolf
    4.8 out of 5 stars 284 Ratings
    Visit Website for QA Wolf
  • Anaconda
    4.4 out of 5 stars 626 Ratings
    Visit Website for Anaconda
  • AuthorityTech
    5.0 out of 5 stars 2 Ratings
    Visit Website for AuthorityTech
  • Parasoft
    4.6 out of 5 stars 152 Ratings
    Visit Website for Parasoft
  • DataImpulse
    4.7 out of 5 stars 31 Ratings
    Visit Website for DataImpulse
ToothPicker:

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.
Wfuzz:

About

Wfuzz provides a framework to automate web application security assessments and could help you secure your web applications by finding and exploiting web application vulnerabilities. You can also run Wfuzz from the official Docker image. Wfuzz is based on the simple concept that it replaces any reference to the fuzz keyword with the value of a given payload. A payload in Wfuzz is a source of data. This simple concept allows any input to be injected in any field of an HTTP request, allowing it to perform complex web security attacks in different web application components such as parameters, authentication, forms, directories/files, headers, etc. Wfuzz’s web application vulnerability scanner is supported by plugins. Wfuzz is a completely modular framework and makes it easy for even the newest Python developers to contribute. Building plugins is simple and takes little more than a few minutes.
ToothPicker:

Platforms Supported

Windows Not Supported
Mac Supported
Linux Not Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Not Supported
Chromebook Not Supported
Wfuzz:

Platforms Supported

Windows Supported
Mac Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported
ToothPicker:

Audience

Professional users interested in a fuzzing solution to test their iOS applications
Wfuzz:

Audience

Anyone looking for a solution offering a security fuzzer tool and library for Python
ToothPicker:

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported
Wfuzz:

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported
ToothPicker:

API

Offers API Not Supported
Wfuzz:

API

Offers API Not Supported
ToothPicker:

Screenshots and Videos

Wfuzz:

Screenshots and Videos

ToothPicker:

Pricing

Free
Free Version Supported
Free Trial Not Supported
Wfuzz:

Pricing

Free
Free Version Supported
Free Trial Not Supported
ToothPicker:

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software
Wfuzz:

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software
ToothPicker:

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported
Wfuzz:

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported
ToothPicker:

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker
Wfuzz:

Company Information

Wfuzz
wfuzz.readthedocs.io
ToothPicker:

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
Wfuzz:

Alternatives

ToothPicker:
Atheris

Atheris

Google
Wfuzz:
ToothPicker:
Jazzer

Jazzer

Code Intelligence
Wfuzz:
ToothPicker:
syzkaller

syzkaller

Google
Wfuzz:
API Fuzzer

API Fuzzer

Fuzzapi
ToothPicker:
Honggfuzz

Honggfuzz

Google
Wfuzz:
ToothPicker:

Categories

Fuzz Testing Supported
Wfuzz:

Categories

Fuzz Testing Supported
ToothPicker:

Integrations

Python Supported
Docker Not Supported
Wfuzz:

Integrations

Python Supported
Docker Supported
ToothPicker:
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information
Wfuzz:
Claim Wfuzz and update features and information
Claim Wfuzz and update features and information