# jtpereyda/boofuzz

A fork and successor of the Sulley Fuzzing Framework

Repository: https://github.com/jtpereyda/boofuzz
Canonical: https://ross.abutalabs.com/products/boofuzz
Language: Python
License: GPL-2.0
License Family: copyleft
Topics: fuzzing, python, security
Last push: 2026-08-06T20:36:50+00:00

## Health v2 (maintenance only)
Score: 66/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 96, release rhythm 8, longevity 100
- inputs: {"age_days": 3934, "days_push": 27, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: none
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 2354, forks 381 (observed 2026-08-28T04:06:40.577943+00:00)

## What it is
boofuzz is a Python-based network protocol fuzzing framework and the successor to the Sulley Fuzzing Framework. It provides data generation, failure detection via instrumentation, target reset, and thorough test data recording for building fuzzer scripts.

## Use cases
- fuzz network protocols for vulnerabilities
- fuzz a TCP or UDP service with malformed inputs
- perform serial or ethernet-layer fuzzing
- find crashes in a custom binary protocol parser
- export fuzzing test results to CSV for analysis
- build a custom fuzzer script in Python

## When to choose
- you need an actively maintained open-source protocol fuzzer
- you want scriptable, extensible fuzzing in Python
- you need instrumentation, target reset, and test recording built in
- you're migrating from the unmaintained Sulley framework

## When to avoid
- you need file-format or in-process fuzzing rather than network protocols
- you want a GUI-driven fuzzer with no scripting
- your project requires a permissive license (boofuzz is GPL-2.0)

## Facets
- artifact type: library
- maturity: active
- function: fuzzing, security, testing, cli
- domain: security, penetration-testing, developer-tools
- platform: python, windows, cross-platform
- tags: network-protocol-fuzzing, sulley-successor, vulnerability-discovery, penetration-testing, linux, macos

## Member repositories
- jtpereyda/boofuzz (main) score 66

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:06:40.577943+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T02:36:28.107527+00:00, confidence not recorded.
  - readme: https://github.com/jtpereyda/boofuzz (fetched 2026-08-28T04:06:40.577943+00:00, sha 63e1581f4bf0)
  - registry_pypi: https://pypi.org/pypi/boofuzz/json (fetched 2026-08-29T10:17:07.477722+00:00, sha 9baea3d92414)
- Data as of 2026-08-30T08:39:29.467469+00:00.