
Security News
Meet Socket at Black Hat and DEF CON 2025 in Las Vegas
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
FFPuppet is a Python module that automates browser process related tasks to aid in fuzzing. Happy bug hunting!
Are you fuzzing the browser? Grizzly can help.
pip install ffpuppet
On Linux xvfb
can be used in order to run headless (this is not the same as Firefox's -headless
mode).
To install xvfb
on Ubuntu run:
apt-get install xvfb
minidump-stackwalk
is used to collect crash reports from minidump files. More
information can be found here.
If you are looking for builds to use with FFPuppet there are a few options.
fuzzfetch is the recommended method for obtaining builds and is also very helpful in automation.
Taskcluster has a collection of many different build types for multiple platforms and branches. An index of the latest mozilla-central builds can be found here.
If you would like to compile your own, build instructions can be found here. When using minidump-stackwalk
breakpad symbols are required for symbolized stacks.
Once installed FFPuppet can be run using the following command:
ffpuppet <firefox_binary>
ffpuppet <firefox_binary> -p <custom_prefs.js> -d -u <testcase>
This will open the provided test case file in Firefox using the provided prefs.js file. Any log data (stderr, stdout, ASan logs... etc) will be dumped to the console if a failure is detected. Grizzly Replay is recommended for replaying test cases.
prefs.js files that can be used for fuzzing or other automated testing can be generated with PrefPicker.
FAQs
A Python module that aids in the automation of Firefox at the process level
We found that ffpuppet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Meet Socket at Black Hat & DEF CON 2025 for 1:1s, insider security talks at Allegiant Stadium, and a private dinner with top minds in software supply chain security.
Security News
CAI is a new open source AI framework that automates penetration testing tasks like scanning and exploitation up to 3,600× faster than humans.
Security News
Deno 2.4 brings back bundling, improves dependency updates and telemetry, and makes the runtime more practical for real-world JavaScript projects.