Thanks to all our contributors, users, and the many people that make fuzz-lightyear
possible!
:heart:
If you love fuzz-lightyear
, please star our project on GitHub to show your support! ⭐
- Setup
Github workflows
for publishing to PyPI (#90) - Migrate Travis-ci to Github actions (#81)
- Support Py38 and drop EOL py versions (#79)
- Fix tests by adding a trailing comma
- Rerun all requests in requests sequences with attacker credentials (#44)
- Add the
--ignore-non-vulnerable
flag to not include any non-vulnerable operations in request sequences (#53)
- Reduce test noise from third-party libraries (#46, #49)
- Disable color printing when not printing to terminal (#51)
- Prevent side-effects upon argument merging in
FuzzingRequest.send
(#45)
- Add the
rerun
parameter to post-fuzz hooks (#41)
- Pin a minimum version for the hypothesis dependency (#42)
- Use a smarter request-sequence generation algorithm using an adjacency list (#37)
- Support YAML Swagger schema files (#39)
- Add a setup fixture decorator
@fuzz_lightyear.setup
which is run before fuzzing (#32) - Add a
--disable-unicode
flag to only fuzz ASCII strings for Swagger strings (#34) - Support post-fuzz hooks, decorated by
@fuzz_lightyear.hooks.post_fuzz(**args)
, which transform fuzzed input ([#36])
- Fuzzer now respects min and max constraints on Swagger numerics (#31)
- Fix dynamic fixture imports for modules which end in
(\.py)+
(#33)
- You can now specify Swagger tags to include in the fuzzing process, to allow developers to enable this tool for a subset of endpoints (#28)