Average Ratings 0 Ratings
Average Ratings 0 Ratings
Description
BFuzz is a tool designed for input-based fuzzing that utilizes HTML as its source input, launching a new instance of your browser to execute various test cases created by the domato generator located in the recurve directory. In addition, BFuzz automates the process by repeatedly performing the same operations without altering any of the test cases. When you run BFuzz, it prompts you to choose between fuzzing Chrome or Firefox; however, it specifically opens Firefox from the recurve directory and generates logs in the terminal. This lightweight script facilitates the opening of a browser and the execution of test cases, which are systematically generated by the domato tool and include the main scripting functionality. Furthermore, the script incorporates supplementary helper code that is essential for effective DOM fuzzing, enhancing the overall testing process. Its streamlined design makes it an efficient choice for developers looking to perform thorough web application testing.
Description
American fuzzy lop is a security-focused fuzzer that utilizes a unique form of compile-time instrumentation along with genetic algorithms to automatically generate effective test cases that can uncover new internal states within the targeted binary. This approach significantly enhances the functional coverage of the code being fuzzed. Additionally, the compact and synthesized test cases produced by the tool can serve as a valuable resource for initiating other, more demanding testing processes in the future. Unlike many other instrumented fuzzers, afl-fuzz is engineered for practicality, boasting a minimal performance overhead while employing a diverse array of effective fuzzing techniques and strategies for minimizing effort. It requires almost no setup and can effortlessly manage complicated, real-world scenarios, such as those found in common image parsing or file compression libraries. As an instrumentation-guided genetic fuzzer, it excels at generating complex file semantics applicable to a wide variety of challenging targets, making it a versatile choice for security testing. Its ability to adapt to different environments further enhances its appeal for developers seeking robust solutions.
API Access
Has API
No
API Access
Has API
No
Integrations
Python
Yes
C
No
C++
No
ClusterFuzz
No
FreeBSD
No
Go
No
Google Chrome
Yes
Google ClusterFuzz
No
Java
No
Mozilla Firefox
Yes
Integrations
Python
Yes
C
Yes
C++
Yes
ClusterFuzz
Yes
FreeBSD
Yes
Go
Yes
Google Chrome
No
Google ClusterFuzz
Yes
Java
Yes
Mozilla Firefox
No
Pricing Details
Free
Free Trial
No
Free Version
Yes
Pricing Details
Free
Free Trial
No
Free Version
Yes
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
Yes
Mac
Yes
Linux
Yes
Chromebook
No
Deployment
Web-Based
No
On-Premises
No
iPhone App
No
iPad App
No
Android App
No
Windows
No
Mac
Yes
Linux
Yes
Chromebook
No
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Customer Support
Business Hours
No
Live Rep (24/7)
No
Online Support
Yes
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Types of Training
Training Docs
Yes
Webinars
No
Live Training (Online)
No
In Person
No
Vendor Details
Company Name
RootUp
Website
github.com/RootUp/BFuzz
Vendor Details
Company Name
Country
United States
Website
github.com/google/AFL