Android application fuzzing framework with fuzzers and crash monitor.
Droid Application Fuzz Framework (DAFF) helps you to fuzz Android Browsers and PDF Readers for memory corruption bugs in real android devices. You can use the inbuilt fuzzers or import fuzz files from your own custom fuzzers. DAFF consist of inbuilt fuzzers and crash monitor. It currently supports fuzzing the following applications:
DAFF has three fuzzer modes:
generators/html/htmls
and pdf samples in generators/pdf/pdfs
git clone https://github.com/ajinabraham/Droid-Application-Fuzz-Framework.git
pip install -r requirements.txt
settings.py
set the DEVICE_ID
as the Android Device ID. You can find this with adb devices
command.FUZZ_IP
as the local IP of the computer. Use ifconfig/ipconfig
command.ADB_BINARY
if adb
is not in your PATH
.python daff_server.py
http://0.0.0.0:1337
After installing the apps in Android Device, use them at least once. Allow popups, configure first time screens etc.
I am just open sourcing a private project for the benefit of community. I don't have time to actively maintain this project. If you have found bugs, fix them and send pull requests. That's how open source should work! I have done my best to make the documentation clear and simple for all types of users. Please check Google or Stack Overflow if you are stuck.