AutoFuzz

A framework to help you with network protocol testing.
Download

AutoFuzz Ranking & Summary

Advertisement

  • Rating:
  • License:
  • GPL
  • Publisher Name:
  • Serge Gorbunov
  • File Size:
  • 244 KB

AutoFuzz Tags


AutoFuzz Description

AutoFuzz is a small, useful framework designed to offer core functionality to automatically understand network protocol and test / fuzz it for implementation flaws. The framework is divided into two main parts: protocol specification's extraction and fuzzing. Protocol specification's extraction is the approach to understand the network protocol by constructing its Finite State Automaton (FSA) and extracting individual message syntax information from samples of network traces. Traces can be imported externally or recorded using built-in proxy server. The FSA is used to guide the fuzzer through the communication process between two nodes and to keep an overall "picture" of the fuzzing progress. The fuzzer stores individual message syntax information in Generic Message Sequences (GMSs). GMSs are constructed using using algorithms of bioinformatics such as global and local alignment. GMS separates static from dynamic data fields where each dynamic data field has an associated type information. The FSA together with the GMSs can be used to improve the quality of the test cases, and reduce the run-time of overall testing. The framework allows adding support to "learn" new protocols, as well as to extend the existing fuzzing functions.


AutoFuzz Related Software