search

dobin / ffw

A fuzzing framework for network servers
GNU General Public License v3.0
114 stars 24 forks source link

Target IP instead of localhost #25

Open eknoes opened 6 years ago

eknoes commented 6 years ago

I have a setup, where the target runs in a local, virtual network, so the target is not reachable by localhost. It would be nice to specify an IP in the config file for remote services.

dobin commented 6 years ago

Yes, this is kinda intentional.

I think there may be better tools to suit attacking non-local network servers, such as:

May I inquire if you have a specific reason to use FFW for this task?

I currently want to keep the feature-set small, but i'm considering supporting this feature, as it should not be that big amount of work.

eknoes commented 6 years ago

Thanks, I will try those. I am currently testing several fuzzing tools for different use cases and found FFW quite promising! :)

dobin commented 6 years ago

I kinda liked mutiny, from Cisco-Talos.

Ah, and it was like Spike -> Sulley -> Boofuzz, so boofuzz is newest. https://github.com/jtpereyda/boofuzz

Also https://github.com/denandz/fuzzotron