Fuzzing is the process to provide invalid, unexpected input to the application and monitors for crashes. The process can be automated or semi-automated. Fuzzing reveals security bugs which might missed during code audits. Fuzzing is the black-box approach which do not need any source code. After identifying input methods, one can send invalid, random inputs and look for a testcase which crashes application. I was involved ...
Updated 08-13-2014 at 04:24 PM by amolnaik4