Monday, May 16, 2011

Nuf-Fuzzer v.0.1 Pre-release

nuf-fuzzer is a powerfull browser fuzzer based on mangleme fuzzer concept. It will be possible to fuzz html tags, css tags javascript functions and DOM objects.

For compilation use Makefile in root directory. Then you can use nuf-fuzzer with following way from command line:
nuf-fuzzer [ -rc CLIENTCOMMAND ] [-p SERVERPORT ] [ -en ERRORCOUNT ]
nuf-fuzzer run server, then run browser and redirect it to address of runned server and port on what is server runned. Then testing browser with automatic generated payloads, while is searched error. When is reached error browser is runs again.
You can run nuf-fuzzer with following parameters:
CLIENTCOMMAND - this command is use to run client browser and redirect it to required address
SERVERPORT - integer number, on this number is run HTTP server
ERRORCOUNT - integer number, that means count of reached errors(browser is running again ERRORCOUNT times)

HTML tags fuzzing
CSS tags fuzzing
DOM objects fuzzing
javascript functions fuzzing
designed to run as daemon
various payload algorithms


No comments: