It is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, it aims for extensibility. The goal: fuzz everything.
Features
Like Sulley, boofuzz incorporates all the critical elements of a fuzzer:
- Easy and quick data generation.
- Instrumentation – AKA failure detection.
- Target reset after failure.
- Recording of test data.
Unlike Sulley, it also features:
- Online documentation.
- Support for arbitrary communications mediums.
- Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.
- Better recording of test data — consistent, thorough, clear.
- Test result CSV export.
- Extensible instrumentation/failure detection.
- Much easier install experience!
- Far fewer bugs.
Changelog v0.1
Features
- Web UI
- Statistics now auto-update.
- Test case logs now stream on the main page.
- Cool left & right arrow buttons to move through a test case
- New Session parameter receive_data_after_fuzz. Controls whether to execute a receiving step after sending
fuzz messages. Defaults to False. This significantly speeds up tests in which the target tends not to respond to
invalid messages.
Fixes
- Text log output would include double titles, e.g. “Test Step: Test Step: …”
Installation
Tutorial
Author
- Pedram Amini <pedram.amini@gmail.com>
- Aaron Portnoy <aportnoy@gmail.com>
- Ryan Sears <fitblip@gmail.com>
Source: https://github.com/jtpereyda/
No comments:
Post a Comment