Sabtu, 04 Februari 2012

FUZZER AND FUZZING

Fuzzer is a word that is widely used in the IT world. but fuzzer in this discussion has nothing to do with fuzzy logic.
fuzzer is a peroses or methods used to find a logic error and kegagala peroses data processing on an application by providing abnormal input into an application and see and learn how the application handles peroses exception of existing.

The fuzzer is used to create multiple requests based on a templated request. This is altered for each fuzz case, and can be used for example to:
  • Directory Brute Forcing
  • Username Enumeration
  • Password Brute Forcing
  • Parameter Fuzzing
  • Parameter Brute Forcing
  • SQL Injection exploit crafting
  • Blind SQL/LDAP/XPATH data extraction
  • Boundary Condition Checking
Fuzz testing or fuzzing is a software testing technique used to discover coding errors and security loopholes in software, operating systems or networks by inputting massive amounts of random data, called fuzz, to the system in an attempt to make it crash. If a vulnerability is found, a tool called a fuzz tester (or fuzzer), indicates potential causes.

Tidak ada komentar:

Posting Komentar