{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security/3"},{"label":"Networking","url":"https://skillfed.io/packages/category/system-networking/2"},{"label":"Traffic Generation","url":"https://skillfed.io/packages/category/software-development-testing-traffic-generation"}],"enrichment":{"capability":"Boofuzz is a network protocol fuzzing framework that generates malformed or unexpected data to test network services for robustness and security vulnerabilities.","skillfed_tags":["security-testing","protocol-fuzzing","vulnerability-discovery"],"use_cases":["Discover vulnerabilities in network services by systematically testing protocol implementations with malformed inputs.","Validate robustness of embedded devices or IoT systems that communicate over serial, Ethernet, or IP protocols.","Test custom protocol implementations during development to catch edge cases before deployment.","Fuzz NETCONF servers or other standardized network protocols to ensure compliance and stability.","Generate and replay specific test cases to reproduce and verify fixes for protocol handling bugs."],"what_it_does":"Boofuzz is a successor to the Sulley fuzzing framework, designed to systematically test network protocols and services by generating malformed, unexpected, or edge-case data and observing how targets respond. It combines data generation, instrumentation (failure detection), target reset, and test recording into a cohesive fuzzing workflow. The framework supports multiple communication mediums\u2014TCP, UDP, serial, raw Ethernet and IP layers, Unix sockets, and NETCONF\u2014making it applicable to a wide range of protocol testing scenarios.\n\nThe package provides both a programmatic API for building custom fuzz scripts and a command-line interface for generic fuzzing workflows. It records test results to CSV, maintains a database of test cases, and includes a web UI for monitoring fuzzing progress. Boofuzz is actively maintained, supports Python 3.8 through 3.11, and aims to be more accessible and extensible than its predecessor while incorporating lessons learned from years of open-source fuzzing practice.","worth_installing":"Yes, if you are conducting security testing or protocol validation and accept the GPL-2.0-only copyleft license. Boofuzz is actively maintained, has low install friction, carries no known vulnerabilities, and provides a mature, well-documented fuzzing framework. Not suitable for proprietary projects without separate licensing or if you require a permissive license."},"id":"boofuzz","links":{"html":"https://skillfed.io/packages/boofuzz","md":"https://skillfed.io/packages/boofuzz.md","pypi":"https://pypi.org/project/boofuzz/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2023-10-06","license_spdx":null,"license_treatment":"copyleft","name":"boofuzz","python_support":"supports_current","summary":"A fork and successor of the Sulley Fuzzing Framework"},"popularity":{"monthly_downloads":76799,"position":14589,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"0.4.2"}