Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

API Fuzzer is a tool designed to perform fuzz-testing on attributes by employing prevalent penetration testing methods while identifying potential vulnerabilities. By taking an API request as its input, the API Fuzzer gem effectively outputs a list of possible vulnerabilities inherent in the API, which may include risks such as cross-site scripting, SQL injection, blind SQL injection, XML external entity vulnerabilities, insecure direct object references (IDOR), issues with API rate limiting, open redirect vulnerabilities, information disclosure flaws, information leakage through headers, and cross-site request forgery vulnerabilities. This comprehensive evaluation helps developers enhance the security of their APIs by pinpointing critical areas that require attention and remediation.

Description

Boofuzz represents a continuation and enhancement of the established Sulley fuzzing framework. In addition to a variety of bug fixes, Boofuzz emphasizes extensibility and flexibility. Mirroring Sulley, it integrates essential features of a fuzzer, such as rapid data generation, instrumentation, failure detection, and the ability to reset targets after a failure, along with the capability to log test data effectively. It offers a more streamlined installation process and accommodates diverse communication mediums. Furthermore, it includes built-in capabilities for serial fuzzing, as well as support for Ethernet, IP-layer, and UDP broadcasting. The improvements in data recording are notable, providing consistency, clarity, and thoroughness in the results. Users benefit from the ability to export test results in CSV format and enjoy extensible instrumentation and failure detection options. Boofuzz operates as a Python library that facilitates the creation of fuzzer scripts, and setting it up within a virtual environment is highly advisable for optimal performance and organization. This attention to detail and user experience makes Boofuzz a powerful tool for security testing.

API Access

Has API

API Access

Has API

Screenshots View All

Screenshots View All

Integrations

Google Sheets
Microsoft Excel
Python
Ruby

Integrations

Google Sheets
Microsoft Excel
Python
Ruby

Pricing Details

Free
Free Trial
Free Version

Pricing Details

Free
Free Trial
Free Version

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Deployment

Web-Based
On-Premises
iPhone App
iPad App
Android App
Windows
Mac
Linux
Chromebook

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Customer Support

Business Hours
Live Rep (24/7)
Online Support

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Types of Training

Training Docs
Webinars
Live Training (Online)
In Person

Vendor Details

Company Name

Fuzzapi

Website

github.com/Fuzzapi/API-fuzzer

Vendor Details

Company Name

Boofuzz

Website

boofuzz.readthedocs.io/en/stable/

Product Features

Product Features

Alternatives

Alternatives

LibFuzzer Reviews

LibFuzzer

LLVM Project
Sulley Reviews

Sulley

OpenRCE
LibFuzzer Reviews

LibFuzzer

LLVM Project
Atheris Reviews

Atheris

Google