Skip to content
SPECIFICTION
Get listed

boofuzz vs Csmith

boofuzz

github.com

Csmith

github.com

Side by side

FigureboofuzzCsmith
Price fromFreeFree
Free planYesYes
Free trial——
Open source——
WindowsYesYes
LinuxYesYes
APIYes—
Self-hostedYes—
Plans published11
Spec score · Fuzz Testing Software8.7 (#3)7.8 (#12)
LicenseThe GitHub repository identifies the project license as GPL-2.0.The repository includes a COPYING license file.
PurposeBoofuzz is a network protocol fuzzing framework and a fork and successor to Sulley.Csmith generates random C programs to find compiler bugs using differential testing.
SupportThe project directs users to Stack Overflow for usage questions and GitHub issues for bugs and suggestions.The project directs users to GitHub issues for bug reports and suggestions and provides a mailing list for discussion.

Plans

boofuzz

  • Free and open sourceFree

boofuzz pricing →

Csmith

  • CsmithFree

Csmith pricing →

In their own words

boofuzz

boofuzz is a network protocol fuzzing framework and a successor to Sulley. It installs as a Python library for building fuzzer scripts, using `pip install boofuzz`, and requires Python 3.9 or later. Its workflow generates data, detects failures, resets targets after failures, and records test data. It supports varied communications, including serial, Ethernet and IP-layer traffic, UDP broadcast, TCP, UDP, SSL, and raw sockets. Run logs are saved in a SQLite database in the boofuzz-results directory, saved runs can be reopened in a web interface with `boo open`, and results can be exported as CSV. A process monitor can detect crashes and restart applications on Windows or Linux, but must run on the target machine. The optional network monitor requires Pcapy and Impacket, which are not installed automatically. Public FTP and HTTP protocol libraries are documented, though their implementations do not provide full protocol coverage. The project describes extensibility for instrumentation and failure detection. It uses the GPL-2.0 license; usage questions are directed to Stack Overflow, while bugs and suggestions can go to GitHub issues or pull requests.

Visit github.com

Csmith

Csmith is a free, open-source generator of random C programs for finding compiler bugs through differential testing. Its output avoids undefined behavior and includes statistics for each generated program. A documented workflow compiles programs with GCC and Clang, then compares their outputs to identify differences. The tool can also create material for a C test suite when users do not want to write one themselves. Command-line options shown by csmith -h and csmith -hh customize random generation. Csmith runs locally on Linux and Windows. Ubuntu source builds require g++, CMake, and m4, followed by CMake and make; Windows builds are documented with Visual Studio or WSL. The project says it should build on most modern machines with a C++ compiler. Generated programs may loop indefinitely, so execution timeouts are recommended. The repository includes a COPYING license file. Bug reports and suggestions go through GitHub issues, with discussion on a mailing list; maintainers warn replies may be delayed.

Visit github.com