mseclab/pyjfuzz

PyJFuzz - Python JSON Fuzzer

pyjfuzz's Issues

GramFuzzer import error

Hi I am getting following error:

python test.py
Traceback (most recent call last):
File "test.py", line 25, in
from test import test_pjf_factory
File "/root/fuzzer/PyJFuzz/test/test_pjf_factory.py", line 24, in
from pyjfuzz.core.pjf_configuration import PJFConfiguration
File "/root/fuzzer/PyJFuzz/pyjfuzz/core/pjf_configuration.py", line 32, in
from .pjf_grammar import generate_json
File "/root/fuzzer/PyJFuzz/pyjfuzz/core/pjf_grammar.py", line 25, in
from gramfuzz import GramFuzzer
ImportError: cannot import name GramFuzzer

Move from GPLv3 to Apache 2.0 or MIT License

Hello,

I wanted to ask if you would be willing to move your project away from GPLv3 license to a more permissive and non-restrictive license like MIT or Apache 2.0 licenses. Github has put together a great license comparison website called ChooseALicense.com if you would like to make a more informed decision.

pip support

Cool project! Please make our life easier for using it and create a PyPi package... https://pypi.python.org/pypi :) This would be very useful, especially when PyJFuzz is used as a lib.

ValueError: Attempted relative import in non-package

how to use pjf fuzz a json parse binary ?

i am learning fuzz. when i try use pjf to fuzz pjf.
[~/fuzz]$ pjf --P "./jq" -p "-r ."
Starting PyJFuzz - Mobile Security Lab 2016

---

| __ \ | | |
| |) | _ | | | _ _ ________
| / | | | | | | | | | / /
| | | || | |_| | | | || |/ / / /
|| _, |_/|| _,//| v1.1.2
/ |
|/

Author: Daniele 'dzonerzy' Linguaglossa
Mail: [email protected]

[ERROR]: 'bool' object has no attribute 'getitem'.

what happend?

Is this compatible with Python 3?

Just curious.

Update pypi package to python 3 support

Hi, just encountered following problem installing PyJFuzz via pypi:

Collecting PyJFuzz
  Using cached https://files.pythonhosted.org/packages/14/19/214133aed1469969c0797bc74335350b061a2e55955e299bf7621aa21904/PyJFuzz-1.1.0.tar.gz
    Complete output from command python setup.py egg_info:
    Traceback (most recent call last):
      File "<string>", line 1, in <module>
      File "/private/var/folders/2l/j15h25hx1bn5k9jwms0_ml380000gn/T/pip-build-kltwdnv8/PyJFuzz/setup.py", line 25, in <module>
        import commands
    ModuleNotFoundError: No module named 'commands'

    ----------------------------------------
Command "python setup.py egg_info" failed with error code 1 in /private/var/folders/2l/j15h25hx1bn5k9jwms0_ml380000gn/T/pip-build-kltwdnv8/PyJFuzz/

I assume the package is not up to date with the latest version available on Github, because the manual installation via the repository works just fine with Python 3. The problem only occurs with Python 3.

JSON order is not maintained

I have provided a sample JSON file with below content and the fuzzed JSON file order is not same as original.

Original: { "data": "Click Here", "vOffset": 100, "alignment": "center" }
Fuzzed: {"vOffset": true, "data": false, "alignment": {"param": "${7*7}a{{cente}}b"}}

Details:
Execution command: C:\Python27\Scripts\pjf.exe --F <filename.json>

I have executed more than 20 times and order is maintained in any run.

PJFConfiguration exclude paramters not work

i have a json object,and i want to not fuzz one specificy parameters, such as : a, but the result fuzz the parameter: a. the picture is below
PJFConfiguration: the exclude not work, i want the "a" not fuzz but it fuzz

Disable PJFFactory logger

Hi, I was wondering if it's possible to disable the PJFFactory logger through the PJFConfiguration or in some other way, because for the moment I think there's no control over the creation of it.

Thanks

cannot import name GramFuzzer

Broken Screenshot links

It would seem that postimg.org is dead.

Screenshots in README.md do not work anymore.

fuzz broken

It looks like a recent change, commit ec5d82d, fixed fuzzing -p with list, breaks the tool.

Please check Line 158 if len(self.config.parameters) < 0: in pjf_factory.py.

The sample python script like simple_fuzzer.py no longer works as expected.

Fix `long` on mutator

Hey 👋

The long type is not defined in python3.

Can you please fix this line, either by removing it or by adding a long = int in your condition on the top of the file.

Thanks!

(also, you should push your new version to pypi, it's better than to install by commit 👍)

Meaning fuzzing levels unclear

Hi,

When configurating the the PyJFuzz library for generating messages you can specify a specific fuzzing level 1 to 6. I was not able to find in the documentation what these levels mean exactly and what the difference is when picking another level. Can you make that more clear in the README or something?

Best regards,
Ivar Derksen