Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
Mayhem is an innovative fuzz testing platform that integrates guided fuzzing with symbolic execution, leveraging a patented technology developed at CMU. This sophisticated solution significantly minimizes the need for manual testing by autonomously detecting and validating defects in software. By facilitating the delivery of safe, secure, and reliable software, it reduces the time, cost, and effort typically required. One of Mayhem's standout features is its capability to gather intelligence about its targets over time; as its understanding evolves, it enhances its analysis and maximizes overall code coverage. Every vulnerability identified is an exploitable and confirmed risk, enabling teams to prioritize their efforts effectively. Furthermore, Mayhem aids in remediation by providing comprehensive system-level insights, including backtraces, memory logs, and register states, which expedite the diagnosis and resolution of issues. Its ability to generate custom test cases in real-time, based on target feedback, eliminates the need for any manual test case creation. Additionally, Mayhem ensures that all generated test cases are readily accessible, making regression testing not only effortless but also a continuous and integral part of the development process. This seamless integration of automated testing and intelligent feedback sets Mayhem apart in the realm of software quality assurance.
Description
ToothPicker serves as an innovative in-process, coverage-guided fuzzer specifically designed for iOS, focusing on the Bluetooth daemon and various Bluetooth protocols. Utilizing FRIDA as its foundation, this tool can be tailored to function on any platform compatible with FRIDA. The repository also features an over-the-air fuzzer that showcases an example implementation for fuzzing Apple's MagicPairing protocol through InternalBlue. Furthermore, it includes the ReplayCrashFile script, which aids in confirming any crashes identified by the in-process fuzzer. This simple fuzzer operates by flipping bits and bytes in inactive connections, lacking coverage or injection, yet it serves effectively as a demonstration and is stateful. It requires only Python and Frida to operate, eliminating the need for additional modules or installations. Built upon the frizzer codebase, it's advisable to establish a virtual Python environment for optimal performance with frizzer. Notably, with the introduction of the iPhone XR/Xs, the PAC (Pointer Authentication Code) feature has been implemented. This advancement underscores the necessity for continuous adaptation of fuzzing tools like ToothPicker to keep pace with evolving iOS security measures.
API Access
Has API
No
API Access
Has API
No
Integrations
Bamboo
Yes
Docker
Yes
Drone
Yes
Google Cloud Platform
Yes
Jenkins
Yes
Okta
Yes
Python
No
Slack
Yes
Travis CI
Yes
Integrations
Bamboo
No
Docker
No
Drone
No
Google Cloud Platform
No
Jenkins
No
Okta
No
Python
Yes
Slack
No
Travis CI
No
Pricing Details
No price information available.
Free Trial
No
Free Version
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
Yes
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
No
Linux
No
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
Yes
iPad App
Yes
Android App
No
Windows
No
Mac
Yes
Linux
No
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
Yes
Live Training (Online)
Yes
In Person
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
ForAllSecure
Founded
2012
Country
United States
Website
www.forallsecure.com
Vendor Details
Company Name
Secure Mobile Networking Lab
Website
github.com/seemoo-lab/toothpicker
Product Features
Automated Testing
Hierarchical View
No
Move & Copy
No
Parameterized Testing
No
Requirements-Based Testing
No
Security Testing
Yes
Supports Parallel Execution
No
Test Script Reviews
No
Unicode Compliance
No