CheckOps home

Tools directory

B

CheckOps

boofuzz

boofuzz is a GPL-2.0 network protocol fuzzing framework in Python, a fork and successor of the Sulley fuzzing framework.

Visit website

Latest public signals

Not refreshed yet. Refresh reads the public site and, when the entry has a GitHub repository, the latest release.

Visit Website

Introduction

boofuzz is a fork and successor of the Sulley fuzzing framework. It is used to fuzz network protocols and devices by describing message formats in Python and sending mutated messages while monitoring the target.

The source code is at jtpereyda/boofuzz on GitHub under the GPL-2.0 licence, with about 2,400 stars; the most recent commit was on 21 September 2026.

Features

  1. Protocol definitions: Describe messages in Python.
  2. Network transports: TCP, UDP, serial and more.
  3. Monitoring: Process and network monitors to detect failures.
  4. Web UI: Track progress.
  5. Test case logging: Record and reproduce cases.

Pros

  1. Free to use: Open source under GPL-2.0.
  2. Maintained: Commits as recent as 21 September 2026.

Cons

  1. Black-box: No coverage feedback by default.
  2. Manual modelling: Protocols must be described by hand.
pip install boofuzz

Then write a session script defining your protocol messages and target (see the README examples).

Resources:

Pricing

boofuzz is free and open source under the GPL-2.0 licence.

  1. Embedded and network device testers.
  2. Security researchers fuzzing protocols.
  3. Not a fit for coverage-guided fuzzing of libraries.

Conclusion

boofuzz is the go-to Python framework for network protocol fuzzing.

Alternatives

Other tools on CheckOps that cover similar ground. Open a page, or compare one with boofuzz side by side.