+
+

Related Products

  • Rocket z/Assure VAP
    1 Rating
    Visit Website
  • Source Defense
    7 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,332 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website
  • PowerDMARC
    266 Ratings
    Visit Website
  • FastBound
    24 Ratings
    Visit Website
  • Jama Connect
    416 Ratings
    Visit Website
  • Nasdaq Boardvantage
    319 Ratings
    Visit Website
  • IPVanish
    223 Ratings
    Visit Website
  • optivalue.ai
    4 Ratings
    Visit Website

About

Defensics Fuzz Testing is a comprehensive, versatile, automated black box fuzzer that enables organizations to efficiently and effectively discover and remediate security weaknesses in software. The generational fuzzer takes an intelligent, targeted approach to negative testing. Advanced file and protocol template fuzzers enable users to build their own test cases. The SDK allows expert users to use the Defensics framework to develop their own test cases. Defensics is a black box fuzzer, meaning it doesn’t require source code to run. With Defensics, users can secure their cyber supply chain to ensure the interoperability, robustness, quality, and security of software and devices before introducing them into IT or lab environments. Defensics fits nearly any development workflow, whether in a traditional SDL or CI environment. Its API and data export capabilities also enable it to integrate with surrounding technologies, making it a true plug-and-play fuzzer.

About

FuzzDB was created to increase the likelihood of finding application security vulnerabilities through dynamic application security testing. It's the first and most comprehensive open dictionary of fault injection patterns, predictable resource locations, and regex for matching server responses. FuzzDB contains comprehensive lists of attack payload primitives for fault injection testing. These patterns, categorized by the attack and where appropriate platform type, are known to cause issues like OS command injection, directory listings, directory traversals, source exposure, file upload bypass, authentication bypass, XSS, HTTP header crlf injections, SQL injection, NoSQL injection, and more. For example, FuzzDB catalogs 56 patterns that can potentially be interpreted as a null byte and contains lists of commonly used methods and name-value pairs that trigger debug modes.

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Not Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

Developers in search of a tool to identify defects and zero-day vulnerabilities in services and protocols​

Audience

Anyone requiring a security scanner solution to test their application protocols

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Supported

API

Offers API Not Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Not Supported
Free Trial Not Supported

Pricing

Free
Free Version Supported
Free Trial Not Supported

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Not Supported
In Person Not Supported

Company Information

Black Duck
Founded: 2002
United States
www.blackduck.com/fuzz-testing.html

Company Information

FuzzDB
github.com/fuzzdb-project/fuzzdb

Alternatives

LibFuzzer

LibFuzzer

LLVM Project

Alternatives

API Fuzzer

API Fuzzer

Fuzzapi
Atheris

Atheris

Google
CI Fuzz

CI Fuzz

Code Intelligence
Honggfuzz

Honggfuzz

Google

Categories

Fuzz Testing Supported

Categories

Fuzz Testing Supported

Integrations

BlackArch Linux Not Supported
NoSQL Not Supported
OWASP ZAP Not Supported
otto-js Supported

Integrations

BlackArch Linux Supported
NoSQL Supported
OWASP ZAP Supported
otto-js Not Supported
Claim Defensics Fuzz Testing and update features and information
Claim Defensics Fuzz Testing and update features and information
Claim FuzzDB and update features and information
Claim FuzzDB and update features and information