blocks|key|3317509|text|您可能会对结合使用Preeny和American+Fuzzy+Lop感兴趣。这是一种使用非常简单的模糊器，并采用了遗传算法，在这种情况下，这意味着它将检测输入比特中的哪些变化导致新的代码路径，并对这些变化给予更多关注。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3317510|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/zardus/preeny|1|http://lcamtuf.coredump.cx/afl/^0|9|6|0|G|I|1|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]|$A|R|B|S|1|T]]|C|$]]|$1|D|3|-4|5|6|7|U|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]|L|$5|G|H|I|C|$J|M]]]]

You might be interested in <a href="http://lcamtuf.coredump.cx/afl/" rel="nofollow">American Fuzzy Lop</a> combined with <a href="https://github.com/zardus/preeny" rel="nofollow">Preeny</a>. It's a fuzzer that is quite simple to use and employs genetic algorithms, which in this case means that it's going to detect which changes in input bits lead to new code paths and pay more attention to those.

blocks|key|98432|text|Scapy看起来对程序员非常友好。它是用Python编写的。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|98433|您可以使用Python命令解释器作为其命令解释器。它有非常好的文档。它看起来很容易使用和理解。|98434|API看起来不错；以一种"pythonic“风格编写。它看起来非常完整，正在积极开发中。|98435|entityMap|0|LINK|mutability|MUTABLE|url|http://www.secdev.org/projects/scapy/^0|0|5|0|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@$A|Q|B|R|1|S]]|C|$]]|$1|D|3|E|5|6|7|T|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|C|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|I|$J|$5|K|L|M|C|$N|O]]]]

<a href="http://www.secdev.org/projects/scapy/" rel="nofollow noreferrer">Scapy</a> looks really programmer friendly. It is written in Python.

You use the Python command interpreter as its command interpreter. It has very nice documentation. It looks easy to use and understand.

API looks decent; written in a "pythonic" style. It looks very complete and it is under active development.

blocks|key|4163957|text|我可以推荐Sulley+fuzzing+framework。它是一个python框架，擅长它的工作。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4163958|如果你想要第2层协议模糊，请查看ernw.de上的人所做的伟大工作：|4163959|http://www.ernw.de/download/l2sulley_04-15-08.tar.bz2|4163960|http://www.ernw.de/download/l2_fuzzing_shmoo08.pdf|4163961|你对模糊特别感兴趣的协议是什么？|4163962|更新:当你的目标是域名系统时，你应该检查一下PROTOS+test+suite，特别是他们的DNS+module。尽管这是一个封闭源代码的Java包，因此您不能像使用框架一样使用它，但是如果PROTOS不够全面，您可以随时编写一个Sulley模块来满足您的特定需求。|4163963|entityMap|0|LINK|mutability|MUTABLE|url|http://code.google.com/p/sulley/|1|2|3|http://www.ee.oulu.fi/research/ouspg/protos/index.html|4|http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/dns/index.html^0|5|O|0|0|0|0|1H|1|0|0|1E|2|0|0|M|H|3|1A|A|4|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@$A|12|B|13|1|14]]|C|$]]|$1|D|3|E|5|6|7|15|8|@]|9|@]|C|$]]|$1|F|3|G|5|6|7|16|8|@]|9|@$A|17|B|18|1|19]]|C|$]]|$1|H|3|I|5|6|7|1A|8|@]|9|@$A|1B|B|1C|1|1D]]|C|$]]|$1|J|3|K|5|6|7|1E|8|@]|9|@]|C|$]]|$1|L|3|M|5|6|7|1F|8|@]|9|@$A|1G|B|1H|1|1I]|$A|1J|B|1K|1|1L]]|C|$]]|$1|N|3|-4|5|6|7|1M|8|@]|9|@]|C|$]]]|O|$P|$5|Q|R|S|C|$T|U]]|V|$5|Q|R|S|C|$T|G]]|W|$5|Q|R|S|C|$T|I]]|X|$5|Q|R|S|C|$T|Y]]|Z|$5|Q|R|S|C|$T|10]]]]

I can recommend the <a href="http://code.google.com/p/sulley/" rel="nofollow noreferrer">Sulley fuzzing framework</a>. It's a python framework and good at its job.

If you want layer 2 protocol fuzzing check out the great work by the people at ernw.de:

<a href="http://www.ernw.de/download/l2sulley_04-15-08.tar.bz2" rel="nofollow noreferrer">http://www.ernw.de/download/l2sulley_04-15-08.tar.bz2</a>

<a href="http://www.ernw.de/download/l2_fuzzing_shmoo08.pdf" rel="nofollow noreferrer">http://www.ernw.de/download/l2_fuzzing_shmoo08.pdf</a> 

What protocols in particular are you interested in fuzzing?

UPDATE: As you are targeting DNS you should check out the <a href="http://www.ee.oulu.fi/research/ouspg/protos/index.html" rel="nofollow noreferrer">PROTOS test suite</a>, in particular their <a href="http://www.ee.oulu.fi/research/ouspg/protos/testing/c09/dns/index.html" rel="nofollow noreferrer">DNS module</a>. This is a closed source Java package though, so you wont be able to use it like a framework, but you can always write a Sulley module to suite your specific needs if PROTOS isn't thorough enough.

blocks|key|3317290|text|我只是在谷歌上搜索一下。我从来没有用过这些。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3317291|3317292|The+Art+of+Fuzzing|unordered-list-item|offset|length|3317293|ProxyFuzz|3317294|Sulley+Fuzzing+Framework|3317295|MalyFuzz|3317296|JBroFuzz|3317297|3317298|entityMap|0|LINK|mutability|MUTABLE|url|http://theartoffuzzing.com/joomla/index.php|1|http://theartoffuzzing.com/joomla/index.php?option=com_content&task=view&id=21&Itemid=40|2|http://www.fuzzing.org/category/sulley/|3|http://sourceforge.net/projects/malybuzz/|4|http://sourceforge.net/projects/jbrofuzz^0|0|0|0|I|0|0|0|9|1|0|0|O|2|0|0|8|3|0|0|8|4|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|17|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|18|8|@]|9|@$F|19|G|1A|1|1B]]|A|$]]|$1|H|3|I|5|E|7|1C|8|@]|9|@$F|1D|G|1E|1|1F]]|A|$]]|$1|J|3|K|5|E|7|1G|8|@]|9|@$F|1H|G|1I|1|1J]]|A|$]]|$1|L|3|M|5|E|7|1K|8|@]|9|@$F|1L|G|1M|1|1N]]|A|$]]|$1|N|3|O|5|E|7|1O|8|@]|9|@$F|1P|G|1Q|1|1R]]|A|$]]|$1|P|3|-4|5|6|7|1S|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|1T|8|@]|9|@]|A|$]]]|R|$S|$5|T|U|V|A|$W|X]]|Y|$5|T|U|V|A|$W|Z]]|10|$5|T|U|V|A|$W|11]]|12|$5|T|U|V|A|$W|13]]|14|$5|T|U|V|A|$W|15]]]]

I just Googled around. I have never used any of these.

<ul>
<li><a href="http://theartoffuzzing.com/joomla/index.php" rel="nofollow noreferrer">The Art of Fuzzing</a></li>
<li><a href="http://theartoffuzzing.com/joomla/index.php?option=com_content&amp;task=view&amp;id=21&amp;Itemid=40" rel="nofollow noreferrer">ProxyFuzz</a></li>
<li><a href="http://www.fuzzing.org/category/sulley/" rel="nofollow noreferrer">Sulley Fuzzing Framework</a></li>
<li><a href="http://sourceforge.net/projects/malybuzz/" rel="nofollow noreferrer">MalyFuzz</a></li>
<li><a href="http://sourceforge.net/projects/jbrofuzz" rel="nofollow noreferrer">JBroFuzz</a></li>
</ul>

blocks|key|3317385|text|我知道http://www.securiteam.com/tools/5FP0Q1PKUS.html作为一个框架非常好，如果你喜欢Perl的话:+fuzzled|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3317386|JborFuzz和大多数其他fuzzers不会这样做，因为它们不是作为框架设计的，当然也不是为网络级别设计的。|3317387|entityMap|0|LINK|mutability|MUTABLE|url|http://www.securiteam.com/tools/5FP0Q1PKUS.html^0|3|1B|0|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@$A|O|B|P|1|Q]]|C|$]]|$1|D|3|E|5|6|7|R|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]]]

I know fuzzled is really good as a framework, if you fancy with Perl : <a href="http://www.securiteam.com/tools/5FP0Q1PKUS.html" rel="nofollow noreferrer">http://www.securiteam.com/tools/5FP0Q1PKUS.html</a>

JborFuzz and most of other fuzzers won't do it since they are not designed as a framework, certainly not for network level.

blocks|key|4164024|text|建议的答案都不能满足我的需求，所以我转而编写了my+own+fuzzing+DNS+server。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4164025|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/raybellis/evldns^0|N|P|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

None of the proposed answers met my needs, so I wrote <a href="https://github.com/raybellis/evldns" rel="nofollow noreferrer">my own fuzzing DNS server</a> instead.

blocks|key|99296|text|这里是我的建议，主要是因为开发它们的安全组织有很好的声誉。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|99297|99298|AutoFuzz+(Software)+(Paper)|unordered-list-item|offset|length|99299|SecFuzz+(Software)+(Paper)|99300|99301|+Scapy+是一个令人惊叹的工具，但这些框架使用Scapy做更多的事情。|style|BOLD|99302|entityMap|0|LINK|mutability|MUTABLE|url|http://autofuzz.sourceforge.net/|1|https://people.csail.mit.edu/sergeyg/publications/autofuzz.pdf|2|https://github.com/ptsankov/secfuzz|3|https://www.inf.ethz.ch/personal/basin/pubs/ast12.pdf^0|0|0|A|8|0|L|5|1|0|9|8|2|K|5|3|0|0|0|7|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|13|8|@]|9|@]|A|$]]|$1|C|3|D|5|E|7|14|8|@]|9|@$F|15|G|16|1|17]|$F|18|G|19|1|1A]]|A|$]]|$1|H|3|I|5|E|7|1B|8|@]|9|@$F|1C|G|1D|1|1E]|$F|1F|G|1G|1|1H]]|A|$]]|$1|J|3|-4|5|6|7|1I|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|1J|8|@$F|1K|G|1L|M|N]]|9|@]|A|$]]|$1|O|3|-4|5|6|7|1M|8|@]|9|@]|A|$]]]|P|$Q|$5|R|S|T|A|$U|V]]|W|$5|R|S|T|A|$U|X]]|Y|$5|R|S|T|A|$U|Z]]|10|$5|R|S|T|A|$U|11]]]]

Here are my recommendations mainly because of the security groups which developed them has a great reputation.

<ul>
<li>AutoFuzz (<a href="http://autofuzz.sourceforge.net/" rel="nofollow">Software</a>) (<a href="https://people.csail.mit.edu/sergeyg/publications/autofuzz.pdf" rel="nofollow">Paper</a>)</li>
<li>SecFuzz (<a href="https://github.com/ptsankov/secfuzz" rel="nofollow">Software</a>) (<a href="https://www.inf.ethz.ch/personal/basin/pubs/ast12.pdf" rel="nofollow">Paper</a>)</li>
</ul>

Scapy is an amazing tool, but these frameworks use Scapy to do more.

Can anyone recommend any programmer-friendly (i.e. extensible) frameworks or systems for performing network level packet <a href="http://en.wikipedia.org/wiki/Fuzzing" rel="noreferrer">fuzzing</a>?

I'm looking for such a system where I can program in additional packet formats and various ways of breaking those packets in a protocol-dependent manner.

I know how to Google. I'm looking for specific recommendations :)

thanks!

Frameworks for network protocol fuzzing?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

聚焦“写作效率、视觉美观与运行性能”三方面进行全面升级，为您提供更高效、稳定的创作环境

社区富文本&Markdown编辑器全新改版上线，欢迎大家体验!

诚挚邀请您参与本次调研，分享您的真实使用感受与建议。您的反馈至关重要，感谢您的支持与参与！

社区新版编辑器体验调研

有没有人推荐一些程序员友好的(即可扩展的)框架或系统来执行网络级的packet 我正在寻找这样一种系统，在这种系统中，我可以编写额外的数据包格式，并以各种方式以协议相关的方式分解这些数据包。我知道怎么用谷歌搜索。我正在寻找具体的建议:)谢谢!

问网络协议模糊的框架？
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问网络协议模糊的框架？EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问网络协议模糊的框架？
EN