untidy - XML Fuzzer

About untidy

untidy is general purpose XML Fuzzer. It takes a string representation of a XML as input and generates a set of modified, potentially invalid, XMLs based on the input. This project is currently hosted at SourceForge. For further information, you may also want to visit untidy SourceForge project page.

News

Warning: MagpieRSS: Failed to fetch http://sourceforge.net/export/rss2_projnews.php?group_id=177519&rss_fulltext=1 (HTTP Error: connection failed (11) in /home/groups/u/un/untidy/htdocs/includes/magpierss/rss_fetch.inc on line 238

Warning

/home/groups/u/un/untidy/htdocs/index.php

Prerequisites

There are no prerequisites for running untidy. I have only tested it with python 2.4 ; so maybe you will find bugs when using it with a different version of python.

top

Install

Just download the distribution file of the project and decompress it .

top

Quickstart

A sample code that invokes the xml fuzzer can be found in untidy.py, this is it:

import untidy

xmlString = '<xml attr1="a"><a>f00!</a></xml>'

xf = untidy.xmlFuzzer()
xf.setRepetitions( [3,30,60] )
iter = xf.fuzz( xmlString )

for i in iter:
print i

This code will print a lot of XML output to the console, if you really want to use untidy for something usefull you should have to change the "print i" line with something that sends the XML to a server you are testing, or saves every fuzzed XML to a different file. Have fun :)

top

License

untidy is an Open Source software package. It is licensed under the GNU General Public License Version 2.

top

Download

Warning: MagpieRSS: Failed to fetch http://sourceforge.net/export/rss2_projfiles.php?group_id=177519 (HTTP Error: connection failed (11) in /home/groups/u/un/untidy/htdocs/includes/magpierss/rss_fetch.inc on line 238

No files have been released yet.

top

Author

untidy has been developed by Andres Riancho, a student at UBA and an information security geek. He has contributed to other Open Source projects and actively writes for SecureArg a security forum (spanish language).

Contact: andres -dot- riancho [at] gmail +dot+ com top