Droid Application Fuzz Framework

Droid Application Fuzz Framework (DAFF) helps you to fuzz Android Browsers and PDF Readers for memory corruption bugs in real android devices. You can use the inbuilt fuzzers or import fuzz files from your own custom fuzzers. DAFF consist of inbuilt fuzzers and crash monitor. It currently supports fuzzing the following applications:


PDF Viewers/Readers

Fuzz Generators

DAFF has three fuzzer modes:

  1. Google Domato - Uses slightly modified version of Google Domato for generating fuzz files.
  2. Dumb Fuzzer - As the the name suggests, a dumb fuzzer. (Only for PDF)
  3. Pregenerated Files (3rd Party Fuzzer) - To use your private or custom fuzzer generated files. Place html samples in generators/html/htmls and pdf samples in generators/pdf/pdfs

Usage for Dummies

Android Device

  • Install the supported Browsers and PDF readers in Android Device.
  • Enable USB Debugging in the Android Device.
  • Connect the Android Device to the same WiFi Network where the Computer is connected.
  • Connect the Android Device to Computer using USB cable and Always allow the Computer for USB Debuging.


  • Install Python 2.7
  • git clone https://github.com/ajinabraham/Droid-Application-Fuzz-Framework.git
  • pip install -r requirements.txt
  • In settings.py set the DEVICE_ID as the Android Device ID. You can find this with adb devices command.
  • Also set FUZZ_IP as the local IP of the computer. Use ifconfig/ipconfig command.
  • Set the path to adb binary in ADB_BINARY if adb is not in your PATH.
  • Run the Web GUI python daff_server.py
  • Access the Fuzzer Web Interface at
  • Select the Application, Select the Fuzz Generator and Start Fuzzing!

DAFF in Action

DAFF in Action

Extra Tip

After installing the apps in Android Device, use them at least once. Allow popups, configure first time screens etc.

Please Note

I am just open sourcing a private project for the benefit of community. I don't have time to actively maintain this project. If you have found bugs, fix them and send pull requests. That's how open source should work! I have done my best to make the documentation clear and simple for all types of users. Please check Google or Stack Overflow if you are stuck.

drawio离线版本在线录屏zgrab2 HTTP 模块二次开发 zgrab2 入门教程 同花顺自动化下单源代码 zmap zgrab2 基础教程 投资者入市教程(股票篇)股市相关资料汇总容易记忆密码生成工具沪股股票研究创业板股票研究股票研究中心在线画URM图同花顺自动卖股票drawio优化版本在线工具列表 宝塔批量添加站长统计核心股市策略同花顺自动化买股票在线画商务图
仅提供信息存储空间服务,本网站相关内容来源互联网,如涉及侵权,请联系我们删除[email protected]