Fuzz a client with sulley acting as server

[kartoch]

Is there a way to force sulley to act as a server ? Looking to the code of the function fuzz in session.py, I'm not really sure it is possible natively in Sulley.

[Fitblip]

What do you mean as 'act as a server'? Put up an http server (or open a
socket) and fuzz some form or requests that come in?

On Sat, Mar 16, 2013 at 11:56 AM, Julien Iguchi-Cartigny <
notifications@github.com> wrote:

Is there a way to force sulley to act as a server ? Looking to the code of
the function fuzz in session.py, I'm not really sure it is possible
natively in Sulley.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/45
.

[ghost]

I think he refers to fuzz the client with Sulley acting as a server. For example, Sulley acting as the web server to fuzz a web browser.

[Fitblip]

Ah, that's what I figured. It can not do that at this point, but I'm in the
process of re-writing sully into V2, so I'll add this to the feature list.

On Tue, Mar 19, 2013 at 11:32 AM, tetheno notifications@github.com wrote:

I think he refers to fuzz the client with Sulley acting as a server. For
example, Sulley acting as the web server to fuzz a web browser.

—
Reply to this email directly or view it on GitHubhttps://github.com//issues/45#issuecomment-15121452
.

[sparticvs]

I am actually working on getting Sulley setup so that it can fuzz web-browsers. Basically it has to do with Sulley being the server and also having a component that launches the browser and redirects to the pages Sulley is creating using something like Selenium.
@Fitblip do you think that this should be merged into Sulley? I was going to release it as a separate application that just had Sulley as a requirement.

[kartoch]

I don't think it will require a lot of work: the function fuzz() has to be modify to:

• remove connect() if TCP
• call listen() (it could be done by user using pre_send()

We are working on an implementation of this idea.

[sparticvs]

@kartoch my response was partially in response to what @tetheno suggested about browser fuzzing. I didn't mean to confuse you. Yes Sulley needs to be able to become a server and I agree it shouldn't be difficult. I got off-topic. Sorry.

[Fitblip]

Hrm, I'd say release it separately, Sulley V2 is going to be massively different, the only thing I'm really keeping is the core fuzzing engine with is basically a python implementation of SPIKE.

[kartoch]

Rotten issue, closing it