BinderFuzzy - Pentest Android Services

BinderFuzzy - Pentest Android Services

An App intended for fuzzing the Binder interface and System Services of Android.

ChickenHook Sicherheit

Screenshots

Screenshot von BinderFuzzy - Pentest Android Services Screenshot von BinderFuzzy - Pentest Android Services Screenshot von BinderFuzzy - Pentest Android Services Screenshot von BinderFuzzy - Pentest Android Services Screenshot von BinderFuzzy - Pentest Android Services Screenshot von BinderFuzzy - Pentest Android Services

Beschreibung

Diese Beschreibung liegt nicht in deiner Sprache vor, angezeigt wird die englische Fassung.

BinderFuzzy is a fuzzer that can generate binder events in order to pentest system services running on the Android operating system (https://developer.android.com/reference/android/os/Binder, https://source.android.com/devices/architecture/hidl/binder-ipc). You can validate if system services have correct error handling or transfer binder objects / tokens of other services in order to validate if the target system service validates binder arguments.

This Project covers following features:

* Browse managers and binder interfaces.
* Execute Fuzzy tasks
* Configure argument lists for each parameter of the method to fuzz
* Read logs of recent tasks
* Use python3 cli (optional) to execute fuzzer from desktop.
* Define fuzzer script and execute via cli

Enjoy our App!

Versionen

Version Datum Größe Benötigt Android Herunterladen
1.0 aktuell
1d21b8068bacd206…
09.01.2021 3,6 MB API 19

Berechtigungen

Was die App beim System anfragt. Sensible Zugriffe gibt Android erst nach deiner Bestätigung frei.

  • InternetzugriffDaten über das Internet senden und empfangen.
  • MANAGE_ACTIVITY_STACKS

Kommentare