Tool Documentation:

sfuzz Usage Example

Fuzz the target server (-S 192.168.1.1) on port 10443 (-p 10443) with TCP output mode (-T), using the basic HTTP config (-f /usr/share/sfuzz/sfuzz-sample/basic.http):

root@kali:~# sfuzz -S 192.168.1.1 -p 10443 -T -f /usr/share/sfuzz/sfuzz-sample/basic.http
[12:53:47] dumping options:
    filename: </usr/share/sfuzz/sfuzz-sample/basic.http>
    state:    <8>
    lineno:   <56>
    literals:  [74]
    sequences: [34]
    symbols: [0]
    req_del:  <200>
    mseq_len: <10024>
    plugin: <none>
    s_syms: <0>
    literal[1] = [AREALLYBADSTRING]

Packages and Binaries:

sfuzz

In the same vein as the Generic Protocol Framework, sfuzz is a really simple to use black box testing suite called Simple Fuzzer (what else would you expect?). The goal is to provide a simple to use, but fairly powerful and flexible black box testing utility.

Installed size: 191 KB
How to install: sudo apt install sfuzz

Dependencies:
  • libc6
sfo
root@kali:~# sfo -h
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3200589].
[3200589] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3200773].
[3200773] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201001].
[3201001] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201206].
[3201206] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201378].
[3201378] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201572].
[3201572] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201771].
[3201771] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3201973].
[3201973] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3202100].
[3202100] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3202306].
[3202306] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3202493].
[3202493] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3202674].
[3202674] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3202882].
[3202882] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3203090].
[3203090] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3203288].
[3203288] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3203497].
[3203497] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3203699].
[3203699] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3203891].
[3203891] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204091].
[3204091] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204231].
[3204231] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204312].
[3204312] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204483].
[3204483] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204611].
[3204611] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204745].
[3204745] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3204934].
[3204934] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3205085].
[3205085] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3205245].
[3205245] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [3205459].
[3205459] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting t
sfuzz
root@kali:~# sfuzz -h
		Simple Fuzzer
By:	 Aaron Conole
version: 0.7.0
url:	 http://aconole.brad-x.com/programs/sfuzz.html
EMAIL:	 [email protected]
Build-prefix: /usr
	-h	 This message.
	-V	 Version information.

networking / output:
	-v	 Verbose output
	-q	 Silent output mode (generally for CLI fuzzing)
	-X	 prints the output in hex

	-b	 Begin fuzzing at the test specified.
	-e	 End testing on failure.
	-t	 Wait time for reading the socket
	-S	 Remote host
	-p	 Port
	-T|-U|-O TCP|UDP|Output mode
	-R	 Refrain from closing connections (ie: "leak" them)

	-f	 Config File
	-L	 Log file
	-n	 Create a new logfile after each fuzz
	-r	 Trim the tailing newline
	-D	 Define a symbol and value (X=y).
	-l	 Only perform literal fuzzing
	-s	 Only perform sequence fuzzing

Updated on: 2024-Nov-17