Boofuzz

Latest version: v0.4.1

Safety actively analyzes 629678 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 2 of 5

0.1.5

------
Features
^^^^^^^^
- New curses logger class to provide a console gui similar to the webinterface. Use the session option `console_gui` to enable it.
This has not been tested under Windows!
- Compatibility for Python 3
- Large test cases are now truncated, unless a failure is detected.
- When a target fails to respond after restart, boofuzz will now continue to restart instead of crashing.
- New Session option `keep_web_open` to allow analyzing the test results after test completion.
- Process monitor creates new crash file for each run by default.
- Long lines now wrap in web view; longer lines no longer need to be truncated.
- Process monitor now stores crash bins in JSON format instead of pickled format.
- Process monitor in Windows will use `taskkill -F` if `taskkill` fails.

Fixes
^^^^^
- Web server no longer crashes when asked for a non-existing test case.
- EINPROGRESS socket error is now handled while opening a socket (note: this sometimes-transient error motivated the move to retry upon connection failure)

0.1.4

------
Features
^^^^^^^^
- New Session options `restart_callbacks`, `pre_send_callbacks`, and `post_test_case_callbacks` to hand over custom callback functions.
- New Session option `fuzz_db_keep_only_n_pass_cases`. This allowes saving only n test cases preceding a failure or error to the database.
- Added logic to find next available port for web interface or disable the web interface.
- Removed sleep logs when sleep time is zero.
- Added option to reuse the connection to the target.

Fixes
^^^^^
- Windows process monitor now handles combination of proc_name and/or start_commands more reasonably
- Windows process monitor handles certain errors more gracefully
- Fixed target close behavior so post send callbacks can use the target.
- Fixed a dependency issue in installation.

0.1.3

------
Features
^^^^^^^^
- Socket Connections now allow client fuzzing.
- Log only the data actually sent, when sending is truncated. Helps reduce database size, especially when fuzzing layer 2 or 3.
- `Target` `recv` function now accepts a `max_recv_bytes` argument.

Fixes
^^^^^
- Fixed install package -- now includes JavaScript files.

0.1.2

------
Features
^^^^^^^^
- Clearer error message when procmon is unavailable at fuzz start.
- Web UI now refreshes current case even when snap-to-current-test-case is disabled.

Fixes
^^^^^
- Web UI no longer permits negative test cases.
- Fix Windows procmon regression.
- Minor fixes and UI tweaks.

0.1.1

------
Features
^^^^^^^^
- New `boo open` command can open and inspect saved database log files.
- Unix procmon now saves coredumps by default.
- Improved "Cannot connect to target" error message.
- Improved API for registering callbacks.
- Made the global `REQUESTS` map available in top level boofuzz package.

Fixes
^^^^^
- Handle exceptions when opening crash bin files in process monitor.
- Fix Block.__len__ to account for custom encoder.

0.1.0

------
Features
^^^^^^^^
- Web UI
- Statistics now auto-update.
- Test case logs now stream on the main page.
- Cool left & right arrow buttons to move through test case
- New ``Session`` parameter ``receive_data_after_fuzz``. Controls whether to execute a receive step after sending
fuzz messages. Defaults to False. This significantly speeds up tests in which the target tends not to respond to
invalid messages.

Fixes
^^^^^
- Text log output would include double titles, e.g. "Test Step: Test Step: ..."

Page 2 of 5

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.