Updated on 2013-02-02 18:01 by Olivier Tétard
Hi folks,
We're pleased to announce the release of Netzob 0.4.1 aka "WaddlingPeccary". The pleasure to publish our latest work is enhanced by the priviledge to present it at FOSDEM 2013.
While the previous release introduced a large amount of changes, this one focuses on stability and UI. Thanks to the plugin mechanism that was introduced in the previous release, we've also added some great features such as Wireshark and Peach exporters! We've also added some new dialogs to configure the workspace, projects and to manage imported traces.
In this release, 191 files were changed (10,968 lines added, 4,097 removed).
Netzob 0.4.1 is available as a Python source .tar.gz
or directly on Pypi. Besides, packages are available for Debian, Ubuntu, Gentoo and ArchLinux.
As usual, we would really appreciate feedbacks from you if you try Netzob and don't forget that we're looking forward to meet any new contributor.
Netzob is an opensource tool for reverse engineering, traffic generation and fuzzing of communication protocols. This tool allows to infer the message format (vocabulary) and the state machine (grammar) of a protocol through passive and active processes. Its objective is to bring state of art academic researches to the operational field, by leveraging bio-informatic and grammatical inferring algorithms in a semi-automatic manner.
Netzob is suitable for reversing network protocols, structured files and system and process flows (IPC and communication with drivers and devices). Dedicated modules are provided to capture and import data in multiple contexts (network, file and process data acquisition). Once inferred, a protocol model can afterward be exported to third party tools (Peach, Scapy, Wireshark, etc.) or used in the traffic generation engine, to allow simulation of realistic and controllable communication endpoints and flows.
Netzob handles different types of protocols: text protocols (like HTTP and IRC), delimiter-based protocols, fixed fields protocols (like IP and TCP) and variable-length fields protocols (like TLV-based protocols).