ManageEngine Endpoint Central
ManageEngine's Endpoint Central, formerly Desktop Central, is a Unified Endpoint Management Solution that manages enterprise mobility management, including all features of mobile app management and mobile device management, as well as client management for a wide range of endpoints such as mobile devices, laptops computers, tablets, servers, and other machines. ManageEngine Endpoint Central allows users to automate their desktop management tasks such as installing software, patching, managing IT assets, imaging, and deploying OS.
Learn more
Airlock Digital
Airlock Digital delivers an easy-to-manage and scalable application control solution to protect endpoints with confidence. Built by cybersecurity professionals and trusted by organizations worldwide, Airlock Digital enforces a Deny by Default security posture to block all untrusted code, including unknown applications, unwanted scripts, malware, and ransomware.
Learn more
Awesome Fuzzing
Awesome Fuzzing serves as a comprehensive compilation of resources for those interested in the field of fuzzing, encompassing an array of materials such as books, both free and paid courses, videos, tools, tutorials, and vulnerable applications ideal for hands-on practice to enhance one's understanding of fuzzing and the early stages of exploit development, including root cause analysis. It features instructional videos focused on fuzzing methodologies, essential tools, and recommended practices, alongside conference presentations, tutorials, and blogs dedicated to the subject. Additionally, it includes software tools that facilitate fuzzing of applications, particularly those utilizing network protocols like HTTP, SSH, and SMTP. Users are encouraged to search for and select exploits linked to downloadable applications, where they can then recreate the exploits with their preferred fuzzer. The resource also encompasses a range of tests tailored for fuzzing engines, highlighting various well-known vulnerabilities and providing a corpus of diverse file formats to enable fuzzing across multiple targets found in the existing fuzzing literature. Ultimately, this collection aims to empower learners with the necessary knowledge and skills to effectively engage with fuzzing techniques and develop their expertise in security testing.
Learn more
ToothPicker
ToothPicker serves as an innovative in-process, coverage-guided fuzzer specifically designed for iOS, focusing on the Bluetooth daemon and various Bluetooth protocols. Utilizing FRIDA as its foundation, this tool can be tailored to function on any platform compatible with FRIDA. The repository also features an over-the-air fuzzer that showcases an example implementation for fuzzing Apple's MagicPairing protocol through InternalBlue. Furthermore, it includes the ReplayCrashFile script, which aids in confirming any crashes identified by the in-process fuzzer. This simple fuzzer operates by flipping bits and bytes in inactive connections, lacking coverage or injection, yet it serves effectively as a demonstration and is stateful. It requires only Python and Frida to operate, eliminating the need for additional modules or installations. Built upon the frizzer codebase, it's advisable to establish a virtual Python environment for optimal performance with frizzer. Notably, with the introduction of the iPhone XR/Xs, the PAC (Pointer Authentication Code) feature has been implemented. This advancement underscores the necessity for continuous adaptation of fuzzing tools like ToothPicker to keep pace with evolving iOS security measures.
Learn more
