Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Ratings and Reviews 0 Ratings

Total
ease
features
design
support

This software has no reviews. Be the first to write a review.

Write a Review

Alternatives to Consider

  • SearchUnify Reviews & Ratings
    150 Ratings
    Company Website
  • Parasoft Reviews & Ratings
    152 Ratings
    Company Website
  • Source Defense Reviews & Ratings
    7 Ratings
    Company Website
  • Aikido Security Reviews & Ratings
    364 Ratings
    Company Website
  • Checksum.ai Reviews & Ratings
    2 Ratings
    Company Website
  • Proton Pass Reviews & Ratings
    31,996 Ratings
    Company Website
  • KrakenD Reviews & Ratings
    76 Ratings
    Company Website
  • TraceEngine Reviews & Ratings
    1 Rating
    Company Website
  • Virtuoso QA Reviews & Ratings
    131 Ratings
    Company Website
  • Jscrambler Reviews & Ratings
    41 Ratings
    Company Website

What is BFuzz?

BFuzz is a specialized fuzzer tool that takes HTML input to initiate a fresh browser session while executing various test cases produced by the domato generator within the recurve directory. This tool not only automates the entire process but also ensures that the test cases remain unchanged throughout its operation. Upon launching BFuzz, users are given the option to select between Chrome or Firefox for fuzzing; however, it is designed to specifically open Firefox from the recurve folder and generates logs in the terminal for tracking purposes. This lightweight script effectively manages the opening of your browser alongside the execution of test cases, making it user-friendly and efficient. The test cases found in the recurve folder are crafted by the domato tool and come with a main script as well as additional helper code aimed at optimizing the DOM fuzzing process. By utilizing BFuzz, users benefit from a streamlined approach to automated browser testing, ultimately improving the effectiveness of security evaluations for web applications. Thus, it serves as an essential resource for developers and security analysts seeking to enhance their testing methodology.

What is API Fuzzer?

API Fuzzer is a tool specifically crafted to generate fuzzed requests aimed at uncovering possible vulnerabilities through recognized penetration testing techniques, ultimately delivering a thorough inventory of security concerns. It takes an API request as input and reveals a variety of vulnerabilities that could be present, such as cross-site scripting, SQL injection, blind SQL injection, XML external entity vulnerabilities, insecure direct object references (IDOR), insufficient API rate limiting, open redirect problems, data exposure issues, information leakage through headers, and cross-site request forgery vulnerabilities, among others. By leveraging this advanced tool, cybersecurity experts can significantly improve their capacity to detect and address weaknesses within their APIs, facilitating a more secure digital environment. Additionally, this proactive approach helps organizations stay ahead of potential threats and better protect sensitive data.

Media

Media

Integrations Supported

Google Chrome
Mozilla Firefox
Python

Integrations Supported

Ruby

API Availability

API Availability

Has API

Pricing Information

Free
Free Version

Pricing Information

Free
Free Version

Supported Platforms

Windows
Mac
Linux

Supported Platforms

Windows
Mac
Linux

Customer Service / Support

Web-Based Support

Customer Service / Support

Web-Based Support

Training Options

Documentation Hub

Training Options

Documentation Hub

Company Facts

Organization Name

RootUp

Company Website

github.com/RootUp/BFuzz

Company Facts

Organization Name

Fuzzapi

Company Website

github.com/Fuzzapi/API-fuzzer

Categories and Features

Fuzz Testing

Not specified

Categories and Features

Fuzz Testing

Not specified

Popular Alternatives

go-fuzz Reviews & Ratings

go-fuzz

dvyukov

Popular Alternatives

LibFuzzer Reviews & Ratings

LibFuzzer

LLVM Project
Vega Reviews & Ratings

Vega

Subgraph
Honggfuzz Reviews & Ratings

Honggfuzz

Google
Atheris Reviews & Ratings

Atheris

Google