Fusil Fuzzer 0.7 – Fuzzing Functions in Python

Outsmart Malicious Hackers


Fusil is a fuzzing framework written in Python and distributed under GNU GPLv2 license. Fusil allows you to easily write “Fuzzing Projects” from a set of functions such as:

  • Create a process
  • Compile a C program
  • Watch a process
  • Watch syslog and so on

Fusil uses small “agents” which exchange messages to launch actions. e.g. MangleFile injects errors into valid file (PDF file, AVI movie, JPEG picture etc.). And then Fusil uses generated filename to run a process.

Currently available projects are ClamAV, Firefox (contains an HTTP server), gettext, gstreamer, identify, libc_env, libc_printf, libexif, linux_syscall, mplayer, php, poppler, vim and xterm.

For fuzzing safety, Fusil limits process memory, process priority, only copies a few environment variables, creates a temporary directory used as working directory, etc.

You can download Fusil 0.7 here:

fusil-0.7.tar.gz (INSTALL doc)

Or read more here.


Posted in: Exploits/Vulnerabilities, Hacking Tools, Programming

, , , , , ,

Recent in Exploits/Vulnerabilities:
- Ubiquiti Wi-Fi Gear Hackable Via 1997 PHP Version
- Powerfuzzer – Automated Customizable Web Fuzzer
- Another MongoDB Hack Leaks Two Million Recordings Of Kids

Related Posts:

Most Read in Exploits/Vulnerabilities:
- Learn to use Metasploit – Tutorials, Docs & Videos - 237,477 views
- AJAX: Is your application secure enough? - 120,536 views
- eEye Launches 0-Day Exploit Tracker - 86,083 views


One Response to Fusil Fuzzer 0.7 – Fuzzing Functions in Python

  1. James C March 11, 2008 at 5:52 pm #

    I’ll give it a go. I currently use SPIKE. Hope fusil requires less initial setup and planing.