Tool Documentation:

sfuzz Usage Example

Fuzz the target server (-S 192.168.1.1) on port 10443 (-p 10443) with TCP output mode (-T), using the basic HTTP config (-f /usr/share/sfuzz/sfuzz-sample/basic.http):

root@kali:~# sfuzz -S 192.168.1.1 -p 10443 -T -f /usr/share/sfuzz/sfuzz-sample/basic.http
[12:53:47] dumping options:
    filename: </usr/share/sfuzz/sfuzz-sample/basic.http>
    state:    <8>
    lineno:   <56>
    literals:  [74]
    sequences: [34]
    symbols: [0]
    req_del:  <200>
    mseq_len: <10024>
    plugin: <none>
    s_syms: <0>
    literal[1] = [AREALLYBADSTRING]

Packages and Binaries:

sfuzz

In the same vein as the Generic Protocol Framework, sfuzz is a really simple to use black box testing suite called Simple Fuzzer (what else would you expect?). The goal is to provide a simple to use, but fairly powerful and flexible black box testing utility.

Installed size: 191 KB
How to install: sudo apt install sfuzz

Dependencies:
  • libc6
sfo
root@kali:~# sfo -h
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49868].
[49868] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49869].
[49869] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49870].
[49870] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49871].
[49871] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49872].
[49872] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49873].
[49873] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49874].
[49874] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49875].
[49875] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49876].
[49876] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49877].
[49877] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49878].
[49878] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49879].
[49879] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49880].
[49880] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49881].
[49881] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49882].
[49882] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49883].
[49883] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49884].
[49884] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49885].
[49885] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49886].
[49886] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49887].
[49887] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49888].
[49888] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49889].
[49889] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49890].
[49890] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49891].
[49891] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49892].
[49892] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49893].
[49893] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49894].
[49894] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49895].
[49895] Exited (possibly normal), status[255]
 [sfo] === spawning!
[] Attempting to spawn a monitored task.
[SFUZZ-ORACLE] attached [49896].
[49896] Exited (possibly normal), status[255]
 [sfo]
sfuzz
root@kali:~# sfuzz -h
		Simple Fuzzer
By:	 Aaron Conole
version: 0.7.0
url:	 http://aconole.brad-x.com/programs/sfuzz.html
EMAIL:	 [email protected]
Build-prefix: /usr
	-h	 This message.
	-V	 Version information.

networking / output:
	-v	 Verbose output
	-q	 Silent output mode (generally for CLI fuzzing)
	-X	 prints the output in hex

	-b	 Begin fuzzing at the test specified.
	-e	 End testing on failure.
	-t	 Wait time for reading the socket
	-S	 Remote host
	-p	 Port
	-T|-U|-O TCP|UDP|Output mode
	-R	 Refrain from closing connections (ie: "leak" them)

	-f	 Config File
	-L	 Log file
	-n	 Create a new logfile after each fuzz
	-r	 Trim the tailing newline
	-D	 Define a symbol and value (X=y).
	-l	 Only perform literal fuzzing
	-s	 Only perform sequence fuzzing


Updated on: 2025-Sep-08