Boofuzz requires Python. Recommended installation requires pip
.
Ubuntu: sudo apt-get install python-pip
Windows: See this help site but make sure to get Python 2.x instead of 3.x (pip is included).
pip install boofuzz
- Download source code: https://github.com/jtpereyda/boofuzz
- Install. Run
pip
from within the boofuzz directory:- Ubuntu:
sudo pip install .
- Windows:
pip install .
- Ubuntu:
Tips:
Use the
-e
option for developer mode, which allows changes to be seen automatically without reinstalling:`sudo pip install -e .`
To install unit test dependencies as well:
`sudo pip install -e .[dev]`
If you’re behind a proxy:
`set HTTPS_PROXY=http://your.proxy.com:port`
On Linux, also use
sudo
’s-E
option:sudo -E pip install -e .
The process monitor is a tool for detecting crashes and restarting an application on Windows (process_monitor_unix.py is provided for Unix).
The process monitor is included with boofuzz, but requires additional libraries to run. While boofuzz typically runs on a different machine than the target, the process monitor must run on the target machine itself.
If you want to use process_monitor.py, follow these additional steps:
Download and install pydbg.
- The OpenRCE repository doesn’t have a setup.py. Use Fitblip’s fork.
C:\Users\IEUser\Downloads\pydbg-master>pip install ./pydbg-master
Download and install pydasm.
C:\Users\IEUser\Downloads\libdasm-master\libdasm-master\pydasm>python setup.py build_ext
**C:\Users\IEUser\Downloads\libdasm-master\libdasm-master\pydasm>python setup.py install
Verify that process_monitor.py runs:
C:\Users\IEUser\Downloads\boofuzz>python process_monitor.py ERR> USAGE: process_monitor.py [-c|--crash_bin FILENAME] filename to serialize crash bin class to [-p|--proc_name NAME] process name to search for and attach to [-i|--ignore_pid PID] PID to ignore when searching for target process [-l|--log_level LEVEL] log level: default 1, increase for more verbosity [--port PORT] TCP port to bind this agent to C:\Users\IEUser\Downloads\boofuzz>
** Building pydasm on Windows requires the Visual C++ Compiler for Python 2.7.
The network monitor was Sulley’s primary tool for recording test data, and has been replaced with boofuzz’s logging mechanisms.