FUZZER AND FUZZING
Fuzzer is a word that is widely used in the IT world. but fuzzer in this discussion has nothing to do with fuzzy logic.
fuzzer is a peroses or methods used to find a logic error and kegagala peroses data processing on an application by providing abnormal input into an application and see and learn how the application handles peroses exception of existing.
The fuzzer is used to create multiple requests based on a templated request. This is altered for each fuzz case, and can be used for example to:
- Directory Brute Forcing
- Username Enumeration
- Password Brute Forcing
- Parameter Fuzzing
- Parameter Brute Forcing
- SQL Injection exploit crafting
- Blind SQL/LDAP/XPATH data extraction
- Boundary Condition Checking
Tidak ada komentar:
Posting Komentar