Fuzzing

Brain dumps on fuzzing, the book and security in general.

New Framework Release

August 13th, 2007 | Category: Sulley

This release contains fixes for many of the bugs recently reported. Also, it includes a zip file containing the full source code.

As mentioned previously, please submit feature requests, bug reports, comments, etc to aportnoy [at] fuzzing.org

–
aaron

Last 5 posts by aportnoy

6 Comments so far

  1. bruter August 14th, 2007 3:21 am

    its broken,
    the default installation puts everything at C:\Program Files

    also the uninstall.exe when clicking on it deteles everything in this folder!

    THANKS ;)

    ha

  2. me August 14th, 2007 5:19 am

    Awesome fuzzer, waiting for file fuzzing capabilities.

    Thanks for making it public!

  3. yes August 14th, 2007 10:04 am

    yes a very good fuzzer, but codenomicon is quite better, but has a another “method”, anyway. great work.

    nice TODO list! ;)

  4. aportnoy August 14th, 2007 10:44 am

    @bruter:

    The default installation directory is C:\Program Files\Sulley Fuzzing Framework. The 2nd page of the installer allows you to change that.

    For some odd reason, on Windows 2000 it appears as though the installer defaults to C:\Program Files (although you *can* still easily change that on the 2nd page). I’m trying to see if this is a known problem with NSI and I’ll post any findings when I discover them.

    With regard to the uninstaller, it simply removes the installation directory… so, you’ll definitely want to specify something other than C:\Program Files ;)

    UPDATE: I’ve uploaded a new installer (overwrote the old one on the main page). Apparently Windows 2k/2k3 differs from XP in what is stored in the registry about the program files directory. Anyway, the new version defaults to the correct directory.

  5. kokanin October 11th, 2007 12:37 am

    @yes:
    how exactly is codenomicon better? Is it the lack of target monitoring (besides sending a protocol “ping”) you like? Extending sulley to write up all protocol mutations to numbered files is a simple but imho meaningless task, hey presto, codenomicon.

  6. me February 25th, 2008 2:17 pm

    Any updates to Sulley?

Leave a reply