service_fuzzeris used to perform a context-aware fuzzing of (hw)service.idc_scriptis used to distill interfaces and arguments of a given server.case_studyis a collection of examples of target specific fuzzing.
I have handed on this project to my colleague and move on to the other project.
Huan Feng, Kang G. Shin:
Understanding and defending the binder attack surface in Android. ACSAC 2016: 398-409
A big thanks to slipper, who guide me to write a fuzzer step by step.