您可能对 American Fuzzy Lop 与 Preeny。 它是一个使用起来非常简单的模糊器，并采用遗传算法，在这种情况下，这意味着它将检测输入位中的哪些变化会导致新的代码路径，并更加关注这些变化。
You might be interested in American Fuzzy Lop combined with Preeny. It's a fuzzer that is quite simple to use and employs genetic algorithms, which in this case means that it's going to detect which changes in input bits lead to new code paths and pay more attention to those.
What protocols in particular are you interested in fuzzing?
UPDATE: As you are targeting DNS you should check out the PROTOS test suite, in particular their DNS module. This is a closed source Java package though, so you wont be able to use it like a framework, but you can always write a Sulley module to suite your specific needs if PROTOS isn't thorough enough.
发布评论
评论（7）
Scapy 看起来对程序员非常友好。 它是用 Python 编写的。
您使用Python命令解释器作为其命令解释器。 它有非常好的文档。 它看起来很容易使用和理解。
API 看起来不错； 以“pythonic”风格编写。 它看起来非常完整，并且正在积极开发中。
Scapy looks really programmer friendly. It is written in Python.
You use the Python command interpreter as its command interpreter. It has very nice documentation. It looks easy to use and understand.
API looks decent; written in a "pythonic" style. It looks very complete and it is under active development.
您可能对 American Fuzzy Lop 与 Preeny。 它是一个使用起来非常简单的模糊器，并采用遗传算法，在这种情况下，这意味着它将检测输入位中的哪些变化会导致新的代码路径，并更加关注这些变化。
You might be interested in American Fuzzy Lop combined with Preeny. It's a fuzzer that is quite simple to use and employs genetic algorithms, which in this case means that it's going to detect which changes in input bits lead to new code paths and pay more attention to those.
我可以推荐 Sulley 模糊测试框架。 它是一个 python 框架并且擅长它的工作。
如果您想要第 2 层协议模糊测试，请查看 ernw.de 人员的出色工作：
http://www.ernw.de/download/l2sulley_04-15-08.tar.bz2
http://www.ernw.de/download/l2_fuzzing_shmoo08.pdf
您对模糊测试特别感兴趣的是哪些协议？
更新：当您的目标是 DNS 时，您应该查看 PROTOS 测试套件< /a>，特别是他们的 DNS 模块< /a>. 虽然这是一个闭源 Java 包，所以您不能像框架一样使用它，但如果 PROTOS 不够彻底，您始终可以编写 Sulley 模块来满足您的特定需求。
I can recommend the Sulley fuzzing framework. It's a python framework and good at its job.
If you want layer 2 protocol fuzzing check out the great work by the people at ernw.de:
http://www.ernw.de/download/l2sulley_04-15-08.tar.bz2
http://www.ernw.de/download/l2_fuzzing_shmoo08.pdf
What protocols in particular are you interested in fuzzing?
UPDATE: As you are targeting DNS you should check out the PROTOS test suite, in particular their DNS module. This is a closed source Java package though, so you wont be able to use it like a framework, but you can always write a Sulley module to suite your specific needs if PROTOS isn't thorough enough.
我刚刚用谷歌搜索了一下。 我从来没有使用过这些。
I just Googled around. I have never used any of these.
我知道 fuzzled 作为一个框架确实很好，如果你喜欢 Perl 的话： http://www.fuzzled.com/5FP0Q1PKUS.html securiteam.com/tools/5FP0Q1PKUS.html
JborFuzz 和大多数其他模糊器不会这样做，因为它们不是设计为框架的，当然不是针对网络级别的。
I know fuzzled is really good as a framework, if you fancy with Perl : http://www.securiteam.com/tools/5FP0Q1PKUS.html
JborFuzz and most of other fuzzers won't do it since they are not designed as a framework, certainly not for network level.
以下是我的建议，主要是因为开发它们的安全组织享有很高的声誉。
Scapy 是一个了不起的工具，但这些框架使用 Scapy 来做更多事情。
Here are my recommendations mainly because of the security groups which developed them has a great reputation.
Scapy is an amazing tool, but these frameworks use Scapy to do more.
所有建议的答案都无法满足我的需求，因此我编写了我自己的模糊 DNS 服务器。
None of the proposed answers met my needs, so I wrote my own fuzzing DNS server instead.