BFuzz Description
BFuzz uses an input-based fuzzer that accepts HTML as input, opens a new browser instance and runs multiple test cases created by domato, which is located in the recurve directory of BFuzz. BFuzz also automates the same tasks repeatedly without affecting any test cases. BFuzz asks you to choose whether to fuzz Firefox or Chrome. However, it will open Firefox using recurve, and create logs in the terminal. BFuzz allows you to open a browser and run testcases. The test cases generated by domato contain the main script. It contains additional code for DOM fuzzing.
BFuzz Alternatives
Defensics Fuzz Testing
Defensics Fuzz Testing, a comprehensive and versatile automated black box fuzzer, allows organizations to discover and remediate software security flaws efficiently and effectively. The generational fuzzer takes a targeted, intelligent approach to negative testing. Users can create their own test cases using advanced file and protocol template fuzzers. The SDK allows users to create their own test cases using the Defensics Framework. Defensics runs as a black-box fuzzer. It does not require source code. Defensics allows users to secure their cyber supply chains, ensuring interoperability, robustness and quality of software and devices, before introducing them in IT or lab environments. Defensics is compatible with any development workflow in a traditional SDL environment or a CI environment. Its API and export capabilities allow it to integrate with surrounding technology, making it a plug-and-play fuzzer.
Learn more
beSTORM
Without access to source code, discover and certify security weaknesses in any product. Any protocol or hardware can be tested with beSTORM. This includes those used in IoT and process control, CANbus-compatible automotive and aerospace. Realtime fuzzing is possible without needing access to the source code. There are no cases to download. One platform, one GUI to use, with more than 250+ pre-built protocol testing modules, and the ability to create custom and proprietary ones. Identify security flaws before deployment. These are the ones that are most commonly discovered by outside actors after release. In your own testing center, certify vendor components and your applications. Software module self-learning and propriety testing. Scalability and customization for all business sizes. Automate the generation and delivery of near infinite attack vectors. Also, document any product failures. Record every pass/fail and manually engineer the exact command that caused each failure.
Learn more
Radamsa
Radamsa generates test cases for robustness testing, or fuzzer. It is used to test a program's ability to withstand malformed or malicious inputs. It works by reading valid data files and generating different outputs. Radamsa's main selling points are that it has found a lot of bugs in important programs, is scriptable and easy to set up. Fuzzing is a technique to find unexpected behavior within programs. The idea is to simply subject the program to different inputs and observe what happens. This process has two parts: how to get the inputs, and what to do with them. Radamsa can be used to solve the first part. The second part is usually a shell script. The testers usually have an idea of what they don't want to happen and try to verify it.
Learn more
go-fuzz
Go-fuzz provides coverage-guided fuzzing for testing Go packages. Fuzzing is most useful for packages that parse binary and text inputs. It is also useful to harden systems that parse inputs that are potentially malicious (anything that is accepted over a LAN). Go Modules are now supported by go-fuzz. Please file an issue if you encounter a module problem. Data is a randomly generated input by go-fuzz. Note that it is usually invalid. The function must return 0 if no input should be added to the corpus, but the fuzzer must increase the priority. The fuzz function has to be in a package go-fuzz is able to import. This means that the code you wish to test cannot be in package main. However, fuzzing internal packages can be done.
Learn more
Pricing
Pricing Starts At:
Free
Free Version:
Yes
Integrations
Company Details
Company:
RootUp
Website:
github.com/RootUp/BFuzz
Recommended Products
Power Up Your AI with Databricks – Free Trial
Take your data and AI to the next level with Databricks – free trial on AWS, Azure, or Google Cloud. Create production-ready Generative AI apps that are accurate, secure, and tailored to your business. Simplify data ingestion from hundreds of sources with effortless ETL automation. Plus, tap into instant, elastic serverless compute during your trial (available on AWS/Azure). Sign up with your work email now to unlock premium trial perks and transform how you work with data – don’t wait!
Product Details
Platforms
Windows
Mac
Linux
Type of Training
Documentation
Customer Support
Online
BFuzz Features and Options
BFuzz User Reviews
Write a Review- Previous
- Next