boofuzz | A fork and successor of the Sulley Fuzzing Framework

by jtpereyda Python Version: 0.4.2 License: GPL-2.0

X-Ray Key Features Code Snippets(6)Community Discussions(4)Vulnerabilities Install Support

kandi X-RAY | boofuzz Summary

boofuzz is a Python library typically used in Testing applications. boofuzz has no bugs, it has no vulnerabilities, it has build file available, it has a Strong Copyleft License and it has high support. You can install using 'pip install boofuzz' or download it from GitHub, PyPI.

A fork and successor of the Sulley Fuzzing Framework

Support

Quality

Security

License

Reuse

Support

boofuzz has a highly active ecosystem.

It has 1770 star(s) with 312 fork(s). There are 52 watchers for this library.

It had no major release in the last 12 months.

There are 89 open issues and 164 have been closed. On average issues are closed in 346 days. There are 9 open pull requests and 0 closed requests.

It has a neutral sentiment in the developer community.

The latest version of boofuzz is 0.4.2

Quality

boofuzz has 0 bugs and 0 code smells.

Security

boofuzz has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

boofuzz code analysis shows 0 unresolved vulnerabilities.

There are 0 security hotspots that need review.

License

boofuzz is licensed under the GPL-2.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

boofuzz releases are available to install and integrate.

Deployable package is available in PyPI.

Build file is available. You can build the component from source.

It has 13774 lines of code, 1079 functions and 169 files.

It has high code complexity. Code complexity directly impacts maintainability of the code.

Top functions reviewed by kandi - BETA

kandi has reviewed boofuzz and discovered the below as its top functions. This is intended to give you an instant insight into boofuzz implemented functionality, and help decide if they suit your requirements.

Fuzz test
Set server options
Parse a target string
Called when a method is missing
Create a scoped block
Remove current block
Starts a block
Returns a list of strings
Get the arguments of a function
Define protobuf message
Create packet
Define a string block
Define a repeat block
Define a random block
Start the server
Define proto files
Mark block end
Generate DNP3 packet
Start the process
Create a usage message
Render the graph
Add a word block
Return a summary of the crash
Defines a size block
Define a DWord block
Draw the screen
Define mutations

Get all kandi verified functions for this library.

boofuzz Key Features

No Key Features are available at this moment for boofuzz.

boofuzz Examples and Code Snippets

introduction to immunity debuuger

Lines of Code : 143

License : No License

Copy

msf-pattern_create -h
msf-pattern_create -l length of buffer


msf-pattern_offset -h
msf-pattern_offset -l lengthofbuffer -q stringfromeip

"\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\

fuzzcoap,Installation,Option 2: Host/Native Machine

Python

Lines of Code : 19

License : Strong Copyleft (GPL-3.0)

Copy

$ git clone https://github.com/bsmelo/fuzzcoap

$ git clone https://github.com/Tanganelli/CoAPthon.git
$ cd CoAPthon
$ python setup.py sdist
$ sudo pip install dist/CoAPthon-4.0.2.tar.gz -r requirements.txt

$ git clone https://github.com/jtpereyda/b

boofuzz-ftp,Getting started,Install boofuzz

Python

Lines of Code : 1

License : Permissive (MIT)

Copy

pip install boofuzz

Session Not Defined BooFuzz

Python

Lines of Code : 6

License : Strong Copyleft (CC BY-SA 4.0)

Copy

from boofuzz import Session

session = Session(
target=Target(
    connection=SocketConnection("127.0.0.1", 9999, proto='tcp')))

boofuzz: 'PED-RPC> remote method restart_target cannot be found'

Python

Lines of Code : 2

License : Strong Copyleft (CC BY-SA 4.0)

Copy

sys.stderr.write('PED-RPC> remote method "{0}" of {1} cannot be found\n'.format(method_name, self))

http fuzzing with boofuzz

Python

Lines of Code : 41

License : Strong Copyleft (CC BY-SA 4.0)

Copy

#!/usr/bin/env python
# Designed for use with boofuzz v0.0.9
from boofuzz import *


def main():
    session = Session(
        target=Target(
            connection=SocketConnection("127.0.0.1", 80, proto='tcp')
        ),
    )

    s_in

Community Discussions

Trending Discussions on boofuzz

how can I say if contains any of given words then show?

boofuzz: 'PED-RPC> remote method restart_target cannot be found'

boofuzz - Target connection reset, skip error

BooFuzz Define a character set when fuzzing

QUESTION

how can I say if contains any of given words then show?

Asked 2019-Oct-16 at 13:03

I am working with data tables, and I want to filter my data table field 4. how can I filter if contains one of the keyword then do something?

...

ANSWER

Answered 2019-Oct-16 at 13:03

var keywords = ['aslr', 'ida pro', 'gdb', 'windbg', 'immunity debugger', 'boofuzz', 'peach fuzzer', 'winafl', 'python', 'assembly', 'penetration testing', 'exploits', 'metasploit', 'metasploit framework', 'ethical hacker', 'pentest', 'computer security', 'hacking', 'oscp', 'osce', 'osee', 'penetration testing', 'offensive security', 'red team', 'vulnerability research', 'vulnerability researcher', 'fuzzing', 'clang', 'llvm', 'address sanitizer', 'afl', 'fuzzers','penetration tester']

columnDefs: [{
            targets: 4,
            render: function (data) {
              for (var i = 0; i < keywords.length; i += 1) {
                  if (data.indexOf(keywords[i]) != -1) {
                      return "FOUND";
                  }
              }
              return "NOT_FOUND";
            }
        }

Source https://stackoverflow.com/questions/58404934

QUESTION

boofuzz: 'PED-RPC> remote method restart_target cannot be found'

Asked 2018-Apr-12 at 06:07

I'm attempting to learn the intricacies of fuzzing unknown protocols to locate vulnerabilities in applications. I'm using a publicly known vulnerable app, Disk Savvy Enterprise 10.4.18, which has a known SEH Buffer Overflow in it.

I currently have a boofuzz script that I'm trying to utilize the process_monitor.py script with, and am unable to restart the service that is crashing. I have process_monitor.py running on my target machine, and am connecting to it successfully from my fuzzing machine. My problem is the error in the question title-- when the application crashes, it 'attempts' to restart the process, but I get the error

PED-RPC> remote method restart_target cannot be found

The relevant bits of my python script are:

...

ANSWER

Answered 2018-Apr-12 at 06:07

TL;DR The method doesn't exist because process_monitor.py is out of date; download the newest copy from boofuzz and try again.

Thank you for the thorough debug information in your question. If process_monitor.py printed a stack trace, including that would also have helped. :)

I searched the code base for "PED-RPC> remote" and found it in boofuzz/pedrpc.py on line 2 (permalink):

Source https://stackoverflow.com/questions/49722029

QUESTION

boofuzz - Target connection reset, skip error

Asked 2017-Nov-05 at 08:27

I am using boofuzz to try to fuzz a specific application. While creating the blocks etc and some testing i noticed that the target sometimes closes the connection. This causes procmon to terminate the target process and restarts it. However this is totally unnecessary for this target.

Can i somehow tell boofuzz to not handle this as an Error (so target is not restarted)

...

ANSWER

Answered 2017-Nov-05 at 08:27

Excellent question! There isn't (wasn't) any way to do this, but there really should be. A reset connection does not always mean a failure.

I just added ignore_connection_reset and ignore_connection_aborted options to the Session class to ignore ECONNRESET and ECONNABORTED errors respectively. Available in version 0.0.10.

Description of arguments available in the docs: http://boofuzz.readthedocs.io/en/latest/source/Session.html

You may find the commit that added these arguments informative for how some of the boofuzz internals work (relevant lines 182-183, 213-214, 741-756): https://github.com/jtpereyda/boofuzz/commit/a1f08837c755578e80f36fd1d78401f21ccbf852

Thank you for the solid question.

Source https://stackoverflow.com/questions/47112754

QUESTION

BooFuzz Define a character set when fuzzing

Asked 2017-Apr-15 at 06:10

Say I wanted to only fuzz with alphanumeric characters or specific strings with boofuzz. Is there a way to force this behavior? In sulley you can make a file named .fuzz_strings that I think does something like, is there something similar to this in boofuzz?

...

ANSWER

Answered 2017-Apr-15 at 06:10

I don't think there is a built-in way to fuzz from a specific list of characters or strings. To make it yourself, you could extend BasePrimitive. See boofuzz/primitives/string.py for an example.

You can also open an issue and make a feature request on the Github repository: https://github.com/jtpereyda/boofuzz/issues

Source https://stackoverflow.com/questions/43382610

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install boofuzz

You can install using 'pip install boofuzz' or download it from GitHub, PyPI.
You can use boofuzz like any standard Python library. You will need to make sure that you have a development environment consisting of a Python distribution including header files, a compiler, pip, and git installed. Make sure that your pip, setuptools, and wheel are up to date. When using pip it is generally recommended to install packages in a virtual environment to avoid changes to the system.

Support

For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .

Find more information at: