bugtraq - Browser Fuzzer 3

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 16 Jan 2010 08:48:33 -0700
From: krakowlabs@...il.com
To: bugtraq@...urityfocus.com
Subject: Browser Fuzzer 3

Browser Fuzzer 3, or bf3, is a comprehensive web browser fuzzer.

* Fuzzes CSS, DOM, HTML, JavaScript and XML
* Attended and Unattended Fuzzing Modes
* 7th Generation Fuzzing Oracle
* Random Data Generator
* Mutation Fuzzing Engine

Browser Fuzzer 3 is designed as a hybrid framework/standalone fuzzer; the modules it uses are extendable but also highly integrated into the core.

bf3 can be used via command line to set all necessary flags for each fuzzing operation. After initialization, bf3 creates test cases in a numbered system. Fuzzing is automated through the browser using the refresh method. If error is detected, server logs can provide insight to the offending test case.

http://www.krakowlabs.com/dev.html for binary, source code, demonstration video and more.

~KL