Open Source Fuzzing Tools

Chapter 5. Commercial Fuzzing Solutions

Solutions in this chapter:

• beSTORM (by Beyond Security)

• BPS-1000 (by BreakingPoint Systems)

• Codenomicon

• Mu-4000 Security Analyzer (by Mu Security)

Introduction

As fuzzing becomes more mainstream, there is a real need for commercial tools to help those who need to use fuzzing tools but do not want to “mix-and-match” various free tools that may be half-baked and frequently suffer from lack of maintenance or support. Those who need the tool to “just work” may want to look at the commercial tools available.

The obvious disadvantage of commercial tools (other than costing money) is that you are limited to the vendor’s way of doing things. Unlike open source tools, you cannot dive into the code and tailor it to your ...