How to do fuzzing in Android applications? Do we have any fuzzer specific to the android?
Actually, I am looking for an easy way to do fuzzing while performing penetration testing of android applications.
Add a comment
|
1 Answer
There is a fork of AFL fuzzer that is specialized in Android fuzzing. You can find it on GitHub. And, there are several fuzzing frameworks specialized for Android.
References
- Andoid-afl.
- Fuzzing with libFuzzer.
- Droid: Android application fuzzing framework.
- Writing the worlds worst Android fuzzer, and then improving it, by Gamozo 2018.
- Fuzzing Android: a recipe for uncovering vulnerabilities inside system components in Android, by Alexandru Blanda (BlackHat'15).
- DoApp (Denial of App): A smart Android Fuzzer for the future.
- Droid-FF.
- AFL-unicorn1 and AFL-unicorn2
- AFL++ with QEMU for native android fuzzing: This is a modification of the original AFLplusplus so as to able to fuzz binary-only Android applications using QEMU and running inside native Android environment.
-
Is there any other approach I can follow do fuzz the apps without using any tool? If the tools are only the options is there any other free tools with better documentation & examples?– MukeshMar 13, 2019 at 16:55
-
You can try the "Monkey testing" with real Monkeys... apart from that I do not understand quite well how you can perform efficient fuzzing without any tool!– perrorMar 13, 2019 at 17:58