MFFA - Media Fuzzing Framework for Android
The main idea behind this project is to create corrupt but structurally valid media files, direct them to the appropriate software components in Android to be decoded and/or played and monitor the system for potential issues (i.e system crashes) that may lead to exploitable vulnerabilities. Custom developed Python scripts are used to send the malformed data across a distributed infrastructure of Android devices, log the findings and monitor for possible issues, in an automated manner. The actual decoding of the media files on the Android devices is done using the Stagefright command line interface. The results are sorted out, in an attempt to find only the unique issues, using a custom built triage mechanism.
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Interactive online malware sandbox for real-time analysis and threat intelligence
Parrot Security OS is a comprehensive, secure, and customizable operating system for cybersecurity professionals, offering over 600+ tools and utilities for red and blue team operations.
Explore the top million websites, ranked by referring subnets, and gain insights into online influence and popularity.
Tool for enumerating proxy configurations and generating CobaltStrike-compatible shellcode.
A digital archive of the internet, allowing users to capture and browse archived web pages.
A collection of Python scripts for password spraying attacks against Lync/S4B & OWA, featuring Atomizer, Vaporizer, Aerosol, and Spindrift tools.
BeEF is a specialized penetration testing tool for exploiting web browser vulnerabilities to assess security.
Advanced command and control tool for red teaming and adversary simulation with extensive features and evasion capabilities.
PINNED
A cybersecurity platform that offers vulnerability scanning, Windows Defender and 3rd party AV management, and MFA compliance reporting, among other features.
Proton Pass is a cross-platform password manager that provides encrypted storage, password generation, and security monitoring features with integrated 2FA and dark web monitoring capabilities.
NordVPN is a commercial VPN service that encrypts internet connections and hides IP addresses through a global network of servers, featuring integrated threat protection and multi-device support.
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.