The following security advisory is sent to the securiteam mailing list, and can
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion
The SecuriTeam alerts list - Free, Accurate, Independent.
Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html
- - - - - - - - -
JBroFuzz - Stateless Network Protocol Fuzzer
------------------------------------------------------------------------
SUMMARY
DETAILS
JBroFuzz is a Java based stateless network protocol Fuzzer for penetration
tests. It allows for the identification of certain classes of
security bugs, by means of creating malformed data and having the network
protocol in question consume the data.
Fuzzing can take place on any part of a socket request by means of
specifying one or more generators. These generators can be hexadecimal,
octal, decimal as well as binary. A version of a protocol sniffer acting
as a TCP reflector is also included within the current implementation.
The current version supports a more robust set of generations, including
basic cross site scripting checks (XSS) as well as basic SQL injection. A
number of tests involving buffer overflows (BFO), format string errors
(FSE) as well as integer overflows (INT) have been added. Also, a separate
panel is present showing the definitions for each and actually what a
generator performs.
ADDITIONAL INFORMATION
To keep updated with the tool visit the project's homepage at:
<http://sourceforge.net/projects/jbrofuzz>
http://sourceforge.net/projects/jbrofuzz
========================================
This bulletin is sent to members of the SecuriTeam mailing list.
To unsubscribe from the list, send mail with an empty subject line and body to:
list-unsubscribe@securiteam.com
In order to subscribe to the mailing list, simply forward this email to:
list-subscribe@securiteam.com
====================
====================
DISCLAIMER:
The information in this bulletin is provided "AS IS" without warranty of any
kind.
In no event shall we be liable for any damages whatsoever including direct,
indirect, incidental, consequential, loss of business profits or special
damages.
