AppSecLive.org

Get the source for JBroFuzz

Go to the OWASP website and navigate to the JBroFuzz page In the Downloads section, you'll see a link to the Sourceforge download site. Grab the latest for Linux. At the time of this writing, that's jbrofuzz-jar-12.zip

Create the needed directories in fakeroot

Eventually, we'll use dir2lzm to make the module, so lets get the directories created that we need:

 $ mkdir -p ./fakeroot/opt/owasp/jbrofuzz
 $ mkdir -p ./fakeroot/usr/share/aplications
 $ mkdir -p ./fakeroot/usr/share/pixmaps

Create and put the module's files into the fakeroot directory

We're prettly lucky with JBroFuzz. Since we are getting a pre-compiled binary, lets get the application file where it needs to go.

 $ unzip -d fakeroot/opt/owasp/jbrofuzz/ temp/jbrofuzz-jar-12.zip 
Archive:  temp/jbrofuzz-jar-12.zip
   creating: fakeroot/opt/owasp/jbrofuzz/examples/
  inflating: fakeroot/opt/owasp/jbrofuzz/examples/example-01-http-version.jbrofuzz  
  inflating: fakeroot/opt/owasp/jbrofuzz/examples/example-02-http-methods.jbrofuzz  
  inflating: fakeroot/opt/owasp/jbrofuzz/examples/example-03-charset-buffer-overflow.jbrofuzz  
  inflating: fakeroot/opt/owasp/jbrofuzz/examples/example-04-mobile-symbian.jbrofuzz  
  inflating: fakeroot/opt/owasp/jbrofuzz/examples/example-05-chrome-version-fuzz.jbrofuzz  
  inflating: fakeroot/opt/owasp/jbrofuzz/JBroFuzz.jar

Creating JBroFuzz's menu file is rather simple. Use a text editor and create a file with the following contents:

[Desktop Entry]
Encoding=UTF-8
Exec=java -jar /opt/owasp/jbrofuzz/JBroFuzz.jar
Icon=/usr/share/pixmaps/jbrofuzz.png
Type=Application
Categories=Application;Network;
Name=Network Protocol Fuzzer
Name[cs]=Network Protocol Fuzzer
GenericName=JBroFuzz
GenericName[cs]=JBroFuzz
MimeType=text/html
X-KDE-StartupNotify=true

Since there isn't an icon for JBroFuzz, I'm using the generic OWASP one I have:

 $ cp temp/owasp-icon.png fakeroot/usr/share/pixmaps/jbrofuzz.png

I already had a Java module from when I created the WebScarab module. I document how I did that in the making the Java module page. [PAGE NOT MADE]

Generate the .lzm module

This is the easy part.

 $ ./dir2lzm ./fakeroot jbrofuzz-1.2.lzm

Add the modules to the ISO build directory

Also cake

 $ cp -i jbrofuzz-1.2.lzm ../contents/slax/base/
 $ chmod 775 ../contents/slax/base/jbrofuzz-1.2.lzm

Test the new module

Since we might have to "rinse and repeat", lets test the new module

 $ cd ../contents/slax/
$  ./make_iso.sh /home/mtesauro/isos/new-owasp.iso

If anything doesn't work as expected, make the changes needed to ./fakeroot and try again.

Clean up and archive

Once you've got a working module, lets clean up a bit.

 $ $ mkdir ./completed_modules/jbrofuzz
 $ mv jbrofuzz-1.2.lzm ./completed_modules/jbrofuzz/
 $ rm -rf ./temp/*

I usually delete anything under ./fakeroot also.

 $ rm -rf ./fakeroot/*