Repository files navigation

Boofuzz is a fork of and the successor to the venerableSulley fuzzingframework. Besides numerous bug fixes, boofuzz aims for extensibility.The goal: fuzz everything.

Sulley has been the preeminent open source fuzzer for some time, but hasfallen out of maintenance.

Like Sulley, boofuzz incorporates all the critical elements of a fuzzer:

• Easy and quick data generation.
• Instrumentation – AKA failure detection.
• Target reset after failure.
• Recording of test data.

Unlike Sulley, boofuzz also features:

• Onlinedocumentation.
• Support for arbitrary communications mediums.
• Built-in support for serial fuzzing, ethernet- and IP-layer, UDP broadcast.
• Better recording of test data -- consistent, thorough, clear.
• Test result CSV export.
• Extensible instrumentation/failure detection.
• Much easier install experience!
• Far fewer bugs.

Sulley is affectionately named after the giant teal and purple creaturefrom Monsters Inc. due to his fuzziness. Boofuzz is likewise named afterthe only creature known to have scared Sulley himself: Boo!

Boo from Monsters Inc

pip install boofuzz

Boofuzz installs as a Python library used to build fuzzer scripts. SeeINSTALL.rst for advanced and detailed instructions.

Documentation is available athttps://boofuzz.readthedocs.io/, including nifty quickstart guides.

Pull requests are welcome, as boofuzz is actively maintained (at thetime of this writing ;)). SeeCONTRIBUTING.rst.

For questions that take the form of “How do I… with boofuzz?” or “I gotthis error with boofuzz, why?”, consider posting your question on StackOverflow. Make sure to use thefuzzing tag.

If you’ve found a bug, or have an idea/suggestion/request, file an issuehere on GitHub.

For other questions, check out boofuzz ongitter orGoogle Groups.

For updates, follow@b00fuzz on Twitter.