boofuzz v0.1 Releases: Network Protocol Fuzzing for Humans - TechnoExploit

Breaking

Post Top Ad

Post Top Ad

Thursday, August 9, 2018

boofuzz v0.1 Releases: Network Protocol Fuzzing for Humans


                 It is a fork of and the successor to the venerable Sulley fuzzing framework. Besides numerous bug fixes, it aims for extensibility. The goal: fuzz everything.

Features

Like Sulley, boofuzz incorporates all the critical elements of a fuzzer:

  • Easy and quick data generation.
  • Instrumentation – AKA failure detection.
  • Target reset after failure.
  • Recording of test data.
Unlike Sulley, it also features:

  • Online documentation.
  • Support for arbitrary communications mediums.
  • Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.
  • Better recording of test data — consistent, thorough, clear.
  • Test result CSV export.
  • Extensible instrumentation/failure detection.
  • Much easier install experience!
  • Far fewer bugs.

Changelog v0.1

Features

  • Web UI
    • Statistics now auto-update.
    • Test case logs now stream on the main page.
    • Cool left & right arrow buttons to move through a test case
  • New Session parameter receive_data_after_fuzz. Controls whether to execute a receiving step after sending
    fuzz messages. Defaults to False. This significantly speeds up tests in which the target tends not to respond to
    invalid messages.

Fixes

  • Text log output would include double titles, e.g. “Test Step: Test Step: …”

Installation

pip install boofuzz

Tutorial

Author



No comments:

Post a Comment

Post Top Ad