boofuzz

At a glance

• Editor score
  7.2 / 10
• Pricing
  Free plan
• Best for
  Open-source protocol-state fuzzing
• Free plan
  Yes
• Paid from
  Free
• Input generation methods
  hybrid
• Facts checked
  20 Sep 2026

• Where it wins

  • Models protocol messages and state transitions in Python
  • Supports TCP, UDP, SSL, raw socket, and serial connections
  • Includes monitoring, restart, logging, crash binning, and reports

• Where it doesn't

  • Requires users to define protocol targets and fuzzing scripts
  • Local execution places setup and runtime responsibility on the user
  • Python-focused rather than a broad multi-language testing tool

Our verdict on boofuzz

boofuzz is an open-source Python library for building and running customizable network protocol fuzzers. It is aimed at engineers who need scriptable testing of protocol messages, state transitions, and target behavior rather than a hosted testing service. The framework supports network protocols, serial connections, raw Ethernet/IP, TCP, UDP, SSL, FTP, and HTTP use cases, with Windows and Linux support. Its hybrid input-generation approach combines fuzzable primitives with test-data generation for modeled targets.

The strongest fit is protocol testing that needs control over connections and target supervision. boofuzz supports TCP, UDP, SSL, raw socket, and serial connections, along with process, network, and callback monitoring. It can detect crashes, restart failed targets, and support remote monitors through RPC. These capabilities give engineers a structured way to connect generated inputs with operational responses, especially when testing stateful protocols or targets that require recovery during long runs.

The published product details show a free, open-source model rather than paid tiers. Results can be logged in SQLite, reopened through a web interface, exported to CSV, and reviewed through crash binning and crash synopsis reports. The tradeoff is that boofuzz requires users to define protocol targets and write fuzzing scripts, so it suits teams comfortable with Python and local execution. Choose it for customizable protocol-state fuzzing across network and serial targets; consider a different category of tool if you want a hosted workflow or less script-driven setup.

Your product? Our editors can test boofuzz in depth and publish a review, labelled as paid · from $149/mo →

boofuzz pricing

boofuzz fact sheet

Alternatives to boofuzz

• MayhemMayhem brings broad hybrid fuzz testing, triage, and regression coverage to CI workflows.9.4
• OSS-FuzzA cloud-based continuous fuzzing service for qualifying open-source projects.9.2
• ClusterFuzzA broad, self-managed fuzzing platform for continuous security and stability testing.8.9

See all boofuzz alternatives →

Featured on iTechGuides

boofuzz is listed in our Fuzz Testing Software directory. Add the badge to your site — it links back to this page.

<a href="https://www.itechguides.com/products/boofuzz/"><img src="https://www.itechguides.com/best/badge/boofuzz.svg" alt="Featured on iTechGuides" width="230" height="46"></a>

Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026

Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.

Last updated 7 Oct 2026 · How we research and update