Ideas / Features for Future Releases

[bernhste]

While we are focusing on releasing a stable Version 1.0.0., we can still think about what could come next.

So I would like to start this discussion as a place brainstorm and pin ideas. They don't have to be in scope of frooky too. We should also write down ideas about how to use it for example.

Mine would be:

• Make it easy to share hooks for certain risks: In the end we want to use frooky to find vulnerabilities. And for that we need hooks describing them. So it would be nice to make it easy for people to share them. With that, we could build a library of dynamic tests for the various MASTG TESTs.
• Plugin-Decoder: We already have a few decoders for argument- and return values based on their types. But like with the previous point, it would be cool if people can commit their own. So we should support easy integration for new decoders.
• Develop a risk-parser: To evaluate the output we could develop a risk parser. The parser will take the ouptu and detect vulnerabilities based on the specified pattern. This can be easy like "RC4" as parameter, or more complex, if a risk depends on the context. Also, the risks of not using defense-in-depth means, that the absence of an event is the pattern we are looking for.
• Performance Update: My gut feeling, and experience, tells me performance will be an issue with many hooks and complex decoders. So after Version 1.0.0. we may do some performance tests and improvements. This can be (very) minor things like generating UUIDs not on the target devices, caching of messages or dynamically de-hook functions if they are called too many times? I tried this a few years ago, but it did not work then.
• Additional Output Support: It would be nice to visualize the output. For example develop a Grafana Dashboard which prints the events in real-time, color-coded according to the MAS categories with the capability for a drill-down on the events.
• Publish frooky on Brew: See also Make this brew-able 🍻 #10

The first two would be very nice and could become something like frida codeshare for frooky decoders and MASTG tests...