So there's now in this video, we're going to take a look at this fuzzing framework carpoolers, it's
based on Python programming language.
So if you're going to Python, then you'll obviously Gwladys Woofers Framework.
Now, this is now a default module in Python.
You need to do that.
You need to open the current terminal and install woofers.
No, I have already introduced that swearing I this requirement already, so speak.
But you install it and it will take two minutes maximum.
So now let's go try to figure out how to use this framework for funding applications.
Now, in the same way, like previous videos, I'm going to use the same binary Ricardos.
First, let's understand this boufal framework.
It's an old example.
I mean, no previous example so that you can get a clearer understanding of boufal framework.
Now my world is running.
Let's see, what's the IP addresses?
And it's funny, down 128 now to import.
Let me read the IP address first, I remember shortly before one good no.
Like importing soccer, you have written books it then you need to type soccer ball, talk a lot for
each and every function to avoid that.
You can also see.
From Buford's import star, what this means is really we are going to import every functioning variable
inside the woofers model so you don't need to Kabul first got woofers, got this function and Boufal
got that function.
You need to correct that.
It will take some time and space.
Okay.
First, we need to create a certain object to to do that.
You need to secessionism close to session of.
We need to specify the target.
One target is equal to and in that we need to target.
Target function, this target function takes the argument a connection.
We need to the connection is equals to know what type of connection we need, the socket connection.
In this market connection, we need to pass IP address.
And the port number, which is one three three seven, and we need to specify the protocol we going
to use justiceship.
OK, this is very one very long function which takes more parameters.
But if you practice for two terms, it will be very easy.
But reading a section object and the target is a connection.
And which connection?
It is socket connection with the various IP address, phone number and protocol, which is pretty clear.
It's clear, no.
We need to create a template, template is like the form of what parameter the application will accept
in our case, in the previous value, we have seen it all from plus space and plus our junk data.
So that we need to define it as a template to do that, we need to underscore initialise and we need
to give a name to this no say or for one no.
Under this, we need to create some comments.
You need to just construct testing.
That will be used by this for the.
So we are going to send.
Or for one and some years, like in every request and every packet, the word for one is constant,
so you can declare it as static.
That means the world for one will never change.
Right.
Only the data will be sending afterward, everyone will be repeated now, since this is the eighth or
changing to some degree in here, you can simply a.
Now, this our template has been completely.
Now we need to session that, we need to target.
After think you need to get this done one.
Need to specify the tambra name here.
So what does it mean in succession decision object will try to come to this connection and will be.
Get ready to add to this campaign to educate this country.
We need to take possession of us all at this point.
The connection has been made and in the Pretty Loaded and Googlization, I'll get no further will see
this template and will for the application.
We're going to see it in action.
Know our application is running on 437 Nahdlatul, an old Biden program.
We'll do one more thing I want to show you.
Now, we need to start off with Khateeb Rosa, because Bofors framework, which Colorado's in its current
format to viewers, great for getting good representation.
You need to download this baby brother.
Just click on download the standard and click on next.
Next.
And it's very easy.
I would really would be the administration now later run the program.
Now we can see our program has been awful.
All right, stop this group.
No, yes, even the application has been awful, eight years or pythons group has been sending the packet
at me because this program is my application and another thread will be created.
And again, that will be acceptable for the other guys reached on this program.
You can see our program has been flutists.
Now to citizens who opened Fire Explorer and 34 year.
For Buford's results.
And you can see the parties user's username and boo for those.
Know, what you want to do is right.
Click on this and click on Open with click perhaps.
And maybe if you don't see the bulldozer, click on look further up on PC and look to see.
Now you to see program was only bootloader and click on this, correct.
Now, you can see our database has been open to see only the funding that can go to Brose data and click
on steps, it will show you each and every step the father has been created in the database.
As we noticed, our program has crashed with years ago.
Keep that in mind.
Now, this is the test case index and this is the description.
This is that this is the actual data the father has sent.
And this is the timestamp.
If you click on first, one is all for one.
And if you click here, you can see one bunch of his here.
And it's ending with Faisal 016 wait, and the next one is the daughter, which does not get because
our application has been stopped and this is.
So the father is saying that after scanning for 016 wait of years, our application has been gradual.
But in a previous deal, we got the first point that I mean program to run for Robert.
But this is showing wrong, you think, if it indeed is going wrong, no, it's not.
It's correct.
So what the father does is it will send a random number of thousands of whites will die to create an
environment which is not taking from base 100, 200 like that.
It is for federal funding to them.
So you are our obligation has the power of holding to more than 5000, and that's why our years have
been placed there.
I hope you have understood now how to persuade Buffer's.
And you can also try this by scanning, using that it can send off to experts and your application will
get awful.