QNX Security Tools

By Alex Plaskett and Georgi Geshev

Random scripts produced as part of the research into QNX security. For more information please see the following publications:

• 99 Problems but a Microkernel ain't one! Slides

• QNX Security Whitepaper

The following tools are included:

• FWAnalysis for tools used for static analysis of firmware and finding low hanging fruit bugs

• IPCFuzz for fuzzing QNX IPC

• PPSFuzz for fuzzing Persistant Publish Subscribe

• MsgFuzz for fuzzing PROCMGR, MEMMGR and PATHMGR

• SyscallFuzz for System Call Fuzzing Neutrino Syscalls

• blackberry_monitor.py for fuzzing through GDB.

• devrev.sh for a QNX device review script.