Peach

Peach provides developers with a collection of tools dedicated to fuzz testing, enabling them to use this technique in order to evaluate the reliability and performance of their software. It aims to offer them a helping hand in detecting potential vulnerabilities that might lead to crashes or malfunctions.

Fuzz testing is done by sending random or invalid data to an application in order to evaluate its behavior in such conditions. Relying on a powerful fuzzing engine, Peach can apply both generation and mutational hybrid methods in order to test software programs.

The package includes multiple applications that can help you perform fuzz tests on files, devices and network protocols. The integrated graphical file fuzzer goes by the name of Fuzz Bang and can be used for dumb fuzzing, while also supporting Peach Pit files. Peach Pits are XML based files that can provide Peach with details concerning the structure of the analyzed data and the target application to be fuzzed.

Fuzz Bang is easy to configure, but basic knowledge about the fuzzing testing method is required to fully understand the used vocabulary. You must specify the target file name and location, select the fuzzing strategy and the number of iterations to use. It also features a built-in debugger that can be attached to the target process, service or the kernel.

During fuzzing, it is advisable that you close GUI programs and you can instruct Fuzz Bang to perform this operation for you, by sending them a 'close' message. The results are displayed in the designated tab of the application.

Peach also includes a validation tool and an XML generator. It can perform tracing and computing using the PeachMinset command-line program, while the Peach Dumb Network Fuzzer enables you to run tests on TCP and UDP connections.

Based on an XML language, Peach assumes the role of a dumb and smart fuzzing utility. It can prove useful in detecting bugs and malfunctions in an application before delivering it to the final user.