EvoMaster vs Netzob

EvoMaster automatically generates system-level tests for web and enterprise applications by fuzzing APIs. It targets REST, GraphQL, and RPC APIs, including gRPC and Thrift. Black-box testing works across implementation languages; white-box testing is available for APIs compiled to the JVM, such as Java and Kotlin. The tool evolves test cases using evolutionary algorithms, dynamic program analysis, and AI heuristics to improve measures such as code coverage and fault detection. Its project describes more than 30 fault-detection oracles, covering issues such as HTTP status problems, schema mismatches, BOLA, and SQL injection. Generated results can include JUnit 4 or 5 tests in Java or Kotlin, Python or JavaScript test suites, and an interactive HTML report by default. White-box testing supports PostgreSQL, MySQL, H2, and MongoDB communications and can generate database initialization. Authentication headers and cookies are supported, as is dynamic credential retrieval through configured login endpoints. EvoMaster is free, has no telemetry, and says it needs no external internet services beyond the application under test. It can run on Linux, macOS, Windows, or self-hosted; PyPI is the recommended installation route, with a JAR and Docker image also available.

Netzob is a free, GPLv3-licensed open-source tool for reverse engineering, traffic generation, and fuzzing of communication protocols. It infers message formats and protocol state machines through passive and active processes. Vocabulary inference learns formats from supplied traces, while grammar inference supports semi-automatic state-machine learning. With those models, its simulator can act as a client, server, or both to generate traffic. The fuzzing module creates optimized test cases by mutation or generation. Inputs can include live network traffic, PCAP captures, IPC, text and binary files, and API flows through supported formats. Exports include XML, human-readable output, and Peach fuzzer formats, with custom exporters possible. Netzob runs locally on Linux and Windows and supports Python 3. It targets network protocols, structured files, text protocols, drivers, devices, and other listed target types. Version 0.4.1 is listed as the latest stable release, with packages dated February 2, 2013.