ToothPicker

ToothPicker

Secure Mobile Networking Lab

About

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses. FuzzDB contains comprehensive lists of attack payload primitives for fault injection testing. These patterns, categorized by the attack and where appropriate platform type, are known to cause issues like OS command injection, directory listings, directory traversals, source exposure, file upload bypass, authentication bypass, XSS, HTTP header crlf injections, SQL injection, NoSQL injection, and more. For example, FuzzDB catalogs 56 patterns that can potentially be interpreted as a null byte and contains lists of commonly used methods and name-value pairs that trigger debug modes.

About

Fuzz testing or fuzzing is a software testing technique, that basically consists in finding implementation bugs using malformed/semi-malformed data injection in an automated fashion. Let’s consider an integer in a program, which stores the result of a user’s choice between 3 questions. When the user picks one, the choice will be 0, 1, or 2, which makes three practical cases. Integers are stored as a static size variable. If the default switch case hasn’t been implemented securely, the program may crash and lead to “classical” security issues. Fuzzing is the art of automatic bug finding, and its role is to find software implementation faults and identify them if possible. A fuzzer is a program that automatically injects semi-random data into a program/stack and detects bugs. The data-generation part is made of generators, and vulnerability identification relies on debugging tools. Generators usually use combinations of static fuzzing vectors.

About

Enjoy the highest performance and unlimited possibilities when working with SQL Server. SQL Server Data Access Components (SDAC) is a library of components that provides native connectivity to SQL Server from Delphi and C++Builder including Community Edition, as well as Lazarus (and Free Pascal) for Windows, Linux, macOS, iOS, and Android for both 32-bit and 64-bit platforms. SDAC-based applications connect to SQL Server directly through OLE DB, which is a native SQL Server interface. SDAC is designed to help programmers develop faster and cleaner SQL Server database applications. SDAC, a high-performance, and feature-rich SQL Server connectivity solution is a complete replacement for standard SQL Server connectivity solutions and presents an efficient native alternative to the Borland Database Engine (BDE) and standard dbExpress driver for access to SQL Server. SDAC-based DB applications are easy to deploy, and do not require the installation of other data provider layers.

About

ToothPicker is an in-process, coverage-guided fuzzer for iOS. It was developed to specifically target iOS's Bluetooth daemon and to analyze various Bluetooth protocols on iOS. As it is built using FRIDA, it can be adapted to target any platform that runs FRIDA. This repository also includes an over-the-air fuzzer with an exemplary implementation to fuzz Apple's MagicPairing protocol using InternalBlue. Additionally, it contains the ReplayCrashFile script that can be used to verify crashes the in-process fuzzer has found. This is a very simple fuzzer that only flips bits and bytes of inactive connections. No coverage, no injection, but nice as a demo and stateful. Runs just with Python and Frida, no modules or installation are required. ToothPicker is built on the codebase of frizzer. It is recommended to set up a virtual Python environment for frizzer. Starting from the iPhone XR/Xs, PAC has been introduced.

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Platforms Supported

Windows
Mac
Linux
Cloud
On-Premises
iPhone
iPad
Android
Chromebook

Audience

Anyone requiring a security scanner solution to test their application protocols

Audience

Professional users looking for a solution to find bugs automatically

Audience

Programmers in need of a tool to develop faster and cleaner SQL Server database applications

Audience

Professional users interested in a fuzzing solution to test their iOS applications

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

Support

Phone Support
24/7 Live Support
Online

API

Offers API

API

Offers API

API

Offers API

API

Offers API

Screenshots and Videos

Screenshots and Videos

Screenshots and Videos

Screenshots and Videos

Pricing

Free
Free Version
Free Trial

Pricing

No information available.
Free Version
Free Trial

Pricing

$199.95 per year
Free Version
Free Trial

Pricing

Free
Free Version
Free Trial

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Training

Documentation
Webinars
Live Online
In Person

Company Information

FuzzDB
github.com/fuzzdb-project/fuzzdb

Company Information

OWASP
United States
owasp.org/www-community/Fuzzing

Company Information

Devart
Founded: 1997
Czech Republic
www.devart.com/sdac/

Company Information

Secure Mobile Networking Lab
github.com/seemoo-lab/toothpicker

Alternatives

Alternatives

ClusterFuzz

ClusterFuzz

Google

Alternatives

Alternatives

LibFuzzer

LibFuzzer

LLVM Project
API Fuzzer

API Fuzzer

Fuzzapi
Atheris

Atheris

Google
Jazzer

Jazzer

Code Intelligence
CI Fuzz

CI Fuzz

Code Intelligence
syzkaller

syzkaller

Google
LibFuzzer

LibFuzzer

LLVM Project
Honggfuzz

Honggfuzz

Google

Categories

Categories

Categories

Categories

Integrations

Azure SQL Database
BlackArch Linux
CI Fuzz
Delphi
FreeBSD
NoSQL
OWASP ZAP
Python
SQL Server

Integrations

Azure SQL Database
BlackArch Linux
CI Fuzz
Delphi
FreeBSD
NoSQL
OWASP ZAP
Python
SQL Server

Integrations

Azure SQL Database
BlackArch Linux
CI Fuzz
Delphi
FreeBSD
NoSQL
OWASP ZAP
Python
SQL Server

Integrations

Azure SQL Database
BlackArch Linux
CI Fuzz
Delphi
FreeBSD
NoSQL
OWASP ZAP
Python
SQL Server
Claim FuzzDB and update features and information
Claim FuzzDB and update features and information
Claim OWASP WSFuzzer and update features and information
Claim OWASP WSFuzzer and update features and information
Claim SQL Server Data Access Components and update features and information
Claim SQL Server Data Access Components and update features and information
Claim ToothPicker and update features and information
Claim ToothPicker and update features and information