Fuzzing

This is a first attempt to collect data on free software fuzzing tools.

Tools

• List of
  • http://www.infosecinstitute.com/blog/2005/12/fuzzers-ultimate-list.html
  • http://www.hacksafe.com.au/blog/category/fuzz-testing/
• The Art Of Fuzzing
• JBroFuzz
• Digital Dwarf products
• As Debian packages:
  • fuzz - stress-test programs by giving them random input
  • zzuf - transparent application input fuzzer
• Debian packages, not sure if they automate fuzzing but they can be useful
  • bfbtester - Brute Force Binary Tester
  • irpas - Internetwork Routing Protocol Attack Suite
  • mozilla-livehttpheaders - Adds information about the HTTP headers to Iceweasel and Iceape
  • netsed - The network packet altering stream editor
  • python-scapy - Packet generator/sniffer and network scanner/discovery
  • spikeproxy - Web application security testing proxy