DROID-FF – THE ANDROID FUZZING FRAMEWORK

Recommendations

Info

DROID-FF : FUZZING CAMPAIGN • Runs the generated files against the target binary ( for eg : /system/xbin/dexdump crash1.dex ) • Makes use of adb_android python module to push generated files to device • Makes use of adb shell command to execute the file against the target binary • Adds a custom log to the android logcat so that we can track any files responsible for the crash ( for eg : log -p F -t CRASH_LOGGER SIGSEGV : filename.dex )
DROID-FF : BUILDING ANDROID MODULES • Navigate to the module directory ( eg : /frameworks/av/cmd/stagefright/) • Use the make helper • source build/envsetup.sh • edit (/frameworks/av/cmd/stagefright/Android.mk) and LOCAL_MODULE =$BUILD_EXECUTABLE • mma ( /out/target/product/generic/system/xbin/dexdump)
Page 1 and 2: DROID-FF - THE ANDROID FUZZING FRAM
Page 3 and 4: DROID-FF : WHY ? • attempts to so
Page 5: DROID-FF : DATA GENERATION • two
Page 10 and 11: DROID-FF : CRASH VERIFICATION • R
Page 13 and 14: DROID-FF : PROCESS TOMBSTONE (2)
Page 15: DROID-FF : EXPLOITABLE ? (2) • ro
Page 18 and 19: DROID-FF : FUTURE IMPROVEMENTS •
Page 20 and 21: HONGFUZZ • Runs within android
Page 22 and 23: HOW TO : DROID-FF
Page 24 and 25: HOW TO : DROID-FF : STEP 2 • To R
Page 26 and 27: HOW TO : DROID-FF : STEP4 • To av
Page 28 and 29: HOW TO : DROID-FF : STEP 6 • Chec
Page 30: THANKS J • Questions please …

DROID-FF – THE ANDROID FUZZING FRAMEWORK

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?