boofuzz vs Wfuzz
boofuzz
github.comWfuzz
github.comSide by side
| Figure | boofuzz | Wfuzz |
|---|---|---|
| Price from | Free | Free |
| Free plan | Yes | Yes |
| Free trial | — | — |
| Open source | — | — |
| Windows | Yes | Yes |
| macOS | — | Yes |
| Linux | Yes | Yes |
| API | Yes | — |
| Self-hosted | Yes | Yes |
| Plans published | 1 | 1 |
| Spec score · Fuzz Testing Software | 8.7 (#3) | 7.3 (#20) |
| Installation | Boofuzz installs with pip as a Python library used to build fuzzer scripts. | The project README gives pip installation and a Docker image command as installation options. |
| License | The GitHub repository identifies the project license as GPL-2.0. | The GitHub repository identifies the project as licensed under GPL-2.0. |
| Purpose | Boofuzz is a network protocol fuzzing framework and a fork and successor to Sulley. | Wfuzz is a framework for automating web application security assessments and finding and exploiting web application vulnerabilities. |
| Support | The project directs users to Stack Overflow for usage questions and GitHub issues for bugs and suggestions. | The project links to documentation and uses GitHub issues and pull requests for project activity. |
Plans
In their own words
boofuzz
boofuzz is a network protocol fuzzing framework and a successor to Sulley. It installs as a Python library for building fuzzer scripts, using `pip install boofuzz`, and requires Python 3.9 or later. Its workflow generates data, detects failures, resets targets after failures, and records test data. It supports varied communications, including serial, Ethernet and IP-layer traffic, UDP broadcast, TCP, UDP, SSL, and raw sockets. Run logs are saved in a SQLite database in the boofuzz-results directory, saved runs can be reopened in a web interface with `boo open`, and results can be exported as CSV. A process monitor can detect crashes and restart applications on Windows or Linux, but must run on the target machine. The optional network monitor requires Pcapy and Impacket, which are not installed automatically. Public FTP and HTTP protocol libraries are documented, though their implementations do not provide full protocol coverage. The project describes extensibility for instrumentation and failure detection. It uses the GPL-2.0 license; usage questions are directed to Stack Overflow, while bugs and suggestions can go to GitHub issues or pull requests.