# GattFuzzing GattFuzzing 是一款针对BLE Gatt的模糊测试工具。
### 环境 Linux
### Requirements Bleak、Scapy
### 安装与使用 #### 方法一
` pip install -r requirements.txt python main.py `
#### 方法二
` python setup.py install gattfuzz `
#### 方法三
` pip install gattfuzz gattfuzz `
#### 使用 ` gattfuzz -h ` 支持两个参数，-f 和 -m，-f为可选。 -m为目标的mac地址。-f 就是你抓取到的pcap包，会根据包提取去进行变异fuzz。如果不指定，则直接遍历目标设备gatt，并进行fuzzing 测试。
### 功能描述
#### 支持两种方式：
基于抓到的数据包进行payload变异，具体变异规则待述；
没有数据包的情况下支持随机数Fuzz。
#### 预期结果：
当检测到目标设备结束广播、断连会push error，可进一步人工核实目标设备状态，重放payload
### 可能遇到的一些问题
目前支持手机hci log抓的pcap包（需要自己转格式）和抓取的空中包两种pcap包，其他的包解析出可能欢迎提issue
Release files for gattfuzz 0.0.14
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | Actions |
|---|---|---|---|---|
| gattfuzz-0.0.14.tar.gz | 16.9 kB | Without provenance | Details for gattfuzz-0.0.14.tar.gz |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Actions Reset |
|---|---|---|---|---|
| gattfuzz-0.0.14-py3-none-any.whl | Python 3 | none | any | Details for gattfuzz-0.0.14-py3-none-any.whl |
Total release size: 37.5 kB
Release files / gattfuzz-0.0.14.tar.gz
| Download URL | gattfuzz-0.0.14.tar.gz |
|---|---|
| Size | 16.9 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
738946abb1380df9074dcf4b63bebe57de4b21efb1b47eef12fe13ea79f36cd2
|
|
BLAKE2b-256 checksum How to use checksums |
7154af48dacb4986ad1b7f3a6495d59825f0553f0783309bce44b50c987c945f
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.10.0
|
Release files / gattfuzz-0.0.14-py3-none-any.whl
| Download URL | gattfuzz-0.0.14-py3-none-any.whl |
|---|---|
| Size | 20.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
f11c6b55f4442bf9f7f07c7c691ca728ededaf8ae2abdf925c0e1cb076643f67
|
|
BLAKE2b-256 checksum How to use checksums |
12418893cdaef3a14022d93eecf17487bc1fd08b2528aa12a6e1d512c549d468
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.0.1 CPython/3.10.0
|
Security for gattfuzz 0.0.14
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
