Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
API Fuzzer is a tool designed to perform fuzz-testing on attributes by employing prevalent penetration testing methods while identifying potential vulnerabilities. By taking an API request as its input, the API Fuzzer gem effectively outputs a list of possible vulnerabilities inherent in the API, which may include risks such as cross-site scripting, SQL injection, blind SQL injection, XML external entity vulnerabilities, insecure direct object references (IDOR), issues with API rate limiting, open redirect vulnerabilities, information disclosure flaws, information leakage through headers, and cross-site request forgery vulnerabilities. This comprehensive evaluation helps developers enhance the security of their APIs by pinpointing critical areas that require attention and remediation.
Description
Peach is an advanced SmartFuzzer that excels in both generation and mutation-based fuzzing techniques. It necessitates the creation of Peach Pit files, which outline the data's structure, type information, and interrelations for effective fuzzing. In addition, Peach provides customizable configurations for a fuzzing session, such as selecting a data transport (publisher) and logging interface. Since its inception in 2004, Peach has undergone continuous development and is currently in its third major iteration. Fuzzing remains one of the quickest methods to uncover security vulnerabilities and identify bugs in software. By utilizing Peach for hardware fuzzing, students will gain insights into the essential principles of device fuzzing. Designed to address any data consumer, Peach can be applied to servers as well as embedded devices. A wide array of users, including researchers, companies, and government agencies, leverage Peach to detect hardware vulnerabilities. This course will specifically concentrate on employing Peach to target embedded devices while also gathering valuable information in case of a device crash, thus enhancing the understanding of fuzzing techniques in practical scenarios.
API Access
Has API
Yes
API Access
Has API
No
Integrations
.NET
Yes
GitLab
Yes
Python
Yes
Ruby
No
Visual Studio
Yes
XML
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
Fuzzapi
Website
github.com/Fuzzapi/API-fuzzer
Vendor Details
Company Name
Peach Tech
Founded
2004
Country
United States
Website
peachtech.gitlab.io/peach-fuzzer-community/