User Guide : Blackbox-testing bfuzz

Requirements

• <strong>A bluetooth dongle</strong> connected to the host machine
• <strong>BlueZ</strong> library (Native built in Linux)
• <strong>Ubuntu 16.04 or 18.04 recommended</strong>

Step 1. Getting Started

To begin bfuzz, click Blackbox Testing in the main page of IoTcube, then proceed by clicking Wireless Testing.

Step 2. Downloading bfuzz

On the following page, download bfuzz, which is a zip containing the fuzzer and packet database.

Linux (32 and 64 bit) is supported at the moment.

Step 3. Unarchiving Package

Extract "bfuzz.zip" from the previous step.

• config_bfuzz.sh: Configuration script for bfuzz. Must be run with <strong>root priviledge (sudo)</strong> before bfuzz(only once).
• bfuzz: You can launch a fuzzing process by executing this program. bfuzz must be run with <strong>root priviledge (sudo)</strong>
• data.db: It stores packets for the smart &amp; stateful fuzzing.

Step 4. Running Program

Open terminal, go to the bfuzz directory and run config_bfuzz.sh with sudo command(only once).

Then run bfuzz with sudo command.

Step 5. Selecting A Target Device and A Protocol

Select any device found via scanning nearby.

Select a any profile of the target device.

Select a protocol to launch fuzzing. Then it automatically starts! If you want to stop the fuzzing process, press Ctrl + C

Step 6. Uploading Your Log

Find the log.wfl file created in the same directory as the fuzzing program and upload it to IoTcube.