Penetration Testing: Re: What protocol to choose for a new fuzzer?

[eladexposed () gmail com]

Hello,

1. Python is coooool.
2. I agree. You should check out Scapy. Scapy is a great framework for packet manipulation written in python (which is 
coooool).
http://www.secdev.org/projects/scapy/
3. You can also use a toolbox named Fusil to write your own fuzzer.
Website: http://fusil.hachoir.org/
Fusil is written in Python (:-P), based on a multi-agents system and distributed under GNU GPL license.
4. I must mention Inguma 
http://sourceforge.net/projects/inguma/
Inguma is a free penetration testing and vulnerability discovery toolkit entirely written in python (nice…). 
Framework includes modules to discover hosts, gather information about, fuzz targets, brute force usernames and 
passwords, exploits, and a disassembler.
5. There's a great list of fuzzers on the following link:
http://www.infosecinstitute.com/blog/2005/12/fuzzers-ultimate-list.html

Kind Regards,
Elad Shapira ("Zest")
"Security, however, is an art, not a science." - RFC 3631

------------------------------------------------------------------------
This list is sponsored by: Cenzic

Top 5 Common Mistakes in 
Securing Web Applications
Get 45 Min Video and PPT Slides

www.cenzic.com/landing/securityfocus/hackinar
------------------------------------------------------------------------