Fuzzer

The SDL Regex Fuzzer application was developed to be a small tool that can help users test regular expressions for potential denial of service vulnerabilities. Regular expression patterns containing certain clauses that execute in exponential time (for example, grouping clauses containing...


Platforms: Windows

nuf-fuzzer is a powerfull browser fuzzer based on mangleme fuzzer concept. It will be possible to fuzz html tags, css tags javascript functions and DOM objects.


Platforms: *nix

In the same vein as the Generic Protocol Framework, I've written a really simple to use black box testing suite called Simple Fuzzer (what else would you expect?). The goal is to provide a simple to use, but fairly powerful and flexible black box testing utility. Currently, the "premier" black...


Platforms: Mac

Taof is a GUI cross-platform Python generic network protocol fuzzer. It has been designed for minimizing set-up time during fuzzing sessions and it is especially useful for fast testing of proprietary or undocumented protocols. Fuzzing is a black-box software testing technique that provides...


Platforms: *nix

Powerfuzzer is a highly automated web fuzzer based on many other Open Source fuzzers available (incl. cfuzzer, fuzzled, fuzzer.pl, jbrofuzz, webscarab, wapiti, Socket Fuzzer). It can detect XSS, Injections (SQL, LDAP, commands, code, XPATH) and other


Platforms: Windows, Mac, Linux

untidy is a XML fuzzer. It takes an XML as input and generates a set of modified, potentially invalid XMLs based on the input.


Platforms: Windows, Mac, Linux

The Auditor security collection is a Live-System based on KNOPPIX. With no installation whatsoever, the analysis platform is started directly from the CD-Rom and is fully accessible within minutes. Independent of the hardware in use, the Auditor security collection offers a standardised working...


Platforms: *nix

A?A?A? Graphing functionality has been added to the fuzzing tab A?A?A? A list of ~58000 popular directories is provided A?A?A? Basic cross site scripting (XSS) checks A?A?A? Basic SQL injection (SQL) checks A?A?A? Buffer overflows (BFO) checks A?A?A? Format string errors (FSE) checks A?A?A?...


Platforms: Mac

VoIPER is a security toolkit that aims to allow developers and security researchers to easily, extensively and automatically test VoIP devices for security vulnerabilties. It incorporates a fuzzing suite built on the Sulley fuzzing framework, a SIP torturer tool based on RFC 4475 and a variety of...


Platforms: *nix