Index | Info | Analysis | Download | Rules


dfuz is a remote protocol fuzzer/triggerer which can do many things such as sending random data/random sizes, together with the data you want. it has alot of ways to tell the program to use this data by using rule files which will be later parsed by the program itself, and with several options and ways to make it very specific, and very flexible. It's not only a remote protocol fuzzer as itself, but it is a scripting-like motor on which you can create any kind of payload, user-friendly.

News: dfuz 0.3.0 beta released
16/06/06: Major changes:
Functionality has changed alot, old rules won't work in the new
dfuz input/output parser: the usage of "initstring", "request" and
"endstring" has been deleted, there's a new way of sending and
receiving data.

For example, if an old rule was:
        """
        port = 4000/tcp
        initstring = "Hello",0x0a
        request = "Random data here:"
        endstring = "End of buffer"
        
	options=read_first,read_after_initstring,read_after_request,random_data,random_alphanum
        """
A new rule doing the same thing would be:
        """
        port = 4000/tcp

        peer read
        peer write: "Hello",0x0a
        peer read
        peer write: "Random data here:",%random:data(10000,alphanum)
        peer read
        options =
        """
18/06/06: Increased MAXSIZE to 65534.
18/06/06: log_data() must be implemented again along with %attach().
18/06/06: Minor bugfixes.
18/06/06: Updated the doc/ files.
18/06/06: New way of random data injecting: %random:data (Functions.txt)
17/06/06: Removed A bunch of junk code dependant of the useless
initstring/request/endstring now.
17/06/06: Removed Socketflush library, it worked fine, but it's useless now.


Dfuz has been growing more and more, hence you can create some nice payload with it, yet protocols are not completely implemented... it does have the functionality to implement them though....

- Diego Bauche
- diegobauche@gmail.com