ToothPicker
ToothPicker is a specialized in-process fuzzer designed for iOS, targeting the Bluetooth daemon bluetoothd and various Bluetooth protocols. Built on FRIDA, it provides adaptability across platforms. The tool includes an over-the-air fuzzer for Apple's MagicPairing protocol and a script for verifying identified crashes, facilitating effective Bluetooth security analysis.
Top ToothPicker Alternatives
american fuzzy lop
This security-oriented fuzzer utilizes advanced compile-time instrumentation and genetic algorithms to identify novel test cases that expose new states in binaries.
Radamsa
Radamsa serves as an advanced test case generator designed for robustness testing, effectively evaluating how programs handle malformed or malicious inputs.
Tayt
Tayt serves as an advanced fuzzer for StarkNet smart contracts, allowing users to analyze contract behavior through rigorous testing.
OWASP WSFuzzer
OWASP WSFuzzer is a robust fuzz testing tool designed to uncover software implementation bugs through automated injection of malformed data.
syzkaller
Syzkaller is an advanced unsupervised coverage-guided kernel fuzzer designed to enhance system security by identifying vulnerabilities across various operating systems, including Linux, FreeBSD, and Windows.
Peach Fuzzer
Peach Fuzzer is an advanced fuzz testing tool that excels in both generation and mutation-based techniques.
Sulley
With robust data generation capabilities, it meticulously monitors network interactions and the health of targets...
LibFuzzer
It tracks code coverage via LLVM's SanitizerCoverage, evolving input data to maximize testing efficiency...
Google OSS-Fuzz
By leveraging advanced fuzzing techniques and scalable execution, it has successfully identified over 10,000 vulnerabilities...
Defensics Fuzz Testing
Users can leverage over 300 maintained fuzz testing suites, facilitating targeted testing across various protocols...
Honggfuzz
It operates efficiently in multi-process and multi-threaded environments, optimizing CPU core usage...
BlackArch Fuzzer
It incorporates 83 unique packages that generate random inputs to probe software vulnerabilities, helping testers...
hevm
It allows users to interactively debug contracts while displaying Solidity source, execute arbitrary EVM code...
ImmuneBytes
Their skilled penetration testers conduct thorough evaluations to uncover potential exploits...
go-fuzz
It excels in identifying vulnerabilities in systems that process data from untrusted sources...
Top ToothPicker Features
- In-process fuzzer for iOS
- Coverage-guided fuzzing capabilities
- Targets Bluetooth daemon specifically
- Adapts to any FRIDA platform
- Over-the-air fuzzing support
- MagicPairing protocol implementation
- Simple bit and byte flipping
- No installation required
- Python and FRIDA compatibility
- Lightweight and easy setup
- Replay crash verification script
- Compatible with multiple iOS versions
- Customizable seed for fuzzing
- Configurable Bluetooth daemon resources
- Log management for crash data
- Crash log symbol enhancement
- Supports InternalBlue integration
- Efficient for stateful fuzzing
- Optimized for iPhone 7 usage
- Future dedicated component plans
