Skip to content
SPECIFICTION
Get listed

boofuzz vs Fuzzinator

boofuzz

github.com

Fuzzinator

fuzzinator.readthedocs.io

Side by side

FigureboofuzzFuzzinator
Price fromFreeFree
Free planYesYes
Free trial——
Open source——
Web—Yes
WindowsYesYes
macOS—Yes
LinuxYesYes
APIYes—
Self-hostedYes—
Plans published11
Spec score · Fuzz Testing Software8.7 (#3)7.8 (#13)
ExtensibilityThe project describes extensibility as a goal and supports extending instrumentation and failure detection.Users can implement custom components when built-in building blocks do not meet their needs.
InstallationBoofuzz installs with pip as a Python library used to build fuzzer scripts.The documentation says to install the latest release with pip install fuzzinator, or install a development checkout locally with pip install .
PurposeBoofuzz is a network protocol fuzzing framework and a fork and successor to Sulley.Fuzzinator automates fuzzing tasks including running test generators against software under test, saving unique issues, reducing failing test cases, updating targets, and scheduling fuzz jobs.

Plans

boofuzz

  • Free and open sourceFree

boofuzz pricing →

Fuzzinator

  • FuzzinatorFree

Fuzzinator pricing →

In their own words

boofuzz

boofuzz is a network protocol fuzzing framework and a successor to Sulley. It installs as a Python library for building fuzzer scripts, using `pip install boofuzz`, and requires Python 3.9 or later. Its workflow generates data, detects failures, resets targets after failures, and records test data. It supports varied communications, including serial, Ethernet and IP-layer traffic, UDP broadcast, TCP, UDP, SSL, and raw sockets. Run logs are saved in a SQLite database in the boofuzz-results directory, saved runs can be reopened in a web interface with `boo open`, and results can be exported as CSV. A process monitor can detect crashes and restart applications on Windows or Linux, but must run on the target machine. The optional network monitor requires Pcapy and Impacket, which are not installed automatically. Public FTP and HTTP protocol libraries are documented, though their implementations do not provide full protocol coverage. The project describes extensibility for instrumentation and failure detection. It uses the GPL-2.0 license; usage questions are directed to Stack Overflow, while bugs and suggestions can go to GitHub issues or pull requests.

Visit github.com

Fuzzinator

Fuzzinator is a free, open-source framework for automating fuzzing jobs against software under test. It runs test generators, stores distinct issues, reduces failing test cases, updates targets and schedules jobs across targets and generators without overloading the workstation. Configuration files and Python snippets let users customize workflows; built-in components handle common scenarios.

Its interfaces include an interactive Web UI, an interactive Text UI for Linux and Mac OS X, and a line-based dump mode for consoles on every platform. Issues and execution statistics are stored in MongoDB, with the documented default URI set to mongodb://localhost/fuzzinator. Reporting to trackers such as Bugzilla or GitHub is optional and must be configured. The framework includes only an example random content generator, so users may need external generators or custom components. Documented requirements are Python 3.10 or later and MongoDB 3.6 or later; Java SE 7 is optional for the Picireny reducer. The documentation lists Linux, macOS and Windows among tested platforms.

Visit fuzzinator.readthedocs.io