Skip to main content

A tool for fuzzing BLE GATT

Project description

# GattFuzz GattFuzz 是一款针对BLE Gatt的模糊测试工具。

### 环境 Linux

### Requirements Bluepy、Scapy

### 安装与使用 #### 方法一

` pip install -r requirements.txt python main.py `

#### 方法二

` python setup.py install gattfuzz `

#### 方法三

` pip install gattfuzz gattfuzz `

#### 使用 ` gattfuzz -h ` 支持两个参数,-f 和 -m,-f为可选。 -m为目标的mac地址。-f 就是你抓取到的pcap包,会根据包提取去进行变异fuzz。如果不指定,则直接遍历目标设备gatt,并进行fuzzing 测试。

### 功能描述

#### 支持两种方式:

  1. 基于抓到的数据包进行pyload变异,具体变异规则待述;

  2. 没有数据包的情况下支持随机数Fuzz。

#### 预期结果:

当检测到目标设备结束广播、断连会push error,可进一步人工核实目标设备状态,重放pyload

### 可能遇到的一些问题

目前支持手机hci log抓的pcap包(需要自己转格式)和抓取的空中包两种pcap包,其他的包解析出可能欢迎提issue

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

gattfuzz-0.0.8.tar.gz (14.4 kB view details)

Uploaded Source

File details

Details for the file gattfuzz-0.0.8.tar.gz.

File metadata

  • Download URL: gattfuzz-0.0.8.tar.gz
  • Upload date:
  • Size: 14.4 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No
  • Uploaded via: twine/4.0.2 CPython/3.10.11

File hashes

Hashes for gattfuzz-0.0.8.tar.gz
Algorithm Hash digest
SHA256 4e9794dd72267bc7bfd791d590b2b39ef9a8dbc14764f22b6ae8087630a101b2
MD5 e165a15cf843cc6698e8ba81f65906a3
BLAKE2b-256 c600d33636ab66337139f1a218cf0395b43a048983a72d122ee52bd465b32ae7

See more details on using hashes here.

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page