The process involves throwing invalid, unexpected, or random data as inputs at a computer. Fuzzers repeat this process and monitor the environment until they detect a vulnerability. Threat actors use fuzzing to find zero-day exploits – this is known as a fuzzing attack.

What is the main purpose of fuzzing techniques?

Fuzzing is an automated testing technique that has been used successfully to discover security vulnerabilities and other bugs in software [89, 90]. In its simplest, black-box, form, a program is run on randomly generated or mutated inputs, in search of cases where the program crashes or hangs.

What tool is used for fuzzing?

Tools which are used in web security can widely be used in fuzz testing such as Burp Suite, Peach Fuzzer, etc. Peach Fuzzer provides more robust and security coverage than a scanner. Other testing tools can search only for known threads whereas Peach Fuzzer enable users to find known and unknown threads.