Timeline for Can fuzzing be considered a software testing technique for any vulnerability type
Current License: CC BY-SA 3.0
7 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 20, 2012 at 12:51 | comment | added | freddyb | The term fuzzing is not precisely defined. Considering that you're doing this for a some kind of research I would suggest that you find a good computer security book and quote the author's definition of fuzzing :) In my opinion fuzzing is less sophisticated than vulnerability scanning. Fuzzing especially requires you to run the application on your own, whereas vulnerability scanning may happen with remote machines. | |
| Mar 20, 2012 at 9:14 | comment | added | eleanor | I have one more question then. If fuzzing is expected to detect application crashes, then it can only detect buffer overflow vulnerabilities. Why are so many sources saying that it can also detect other types of vulnerabilities like sql, xss, command execution, etc, if they don't provoke application to crash, but just display additional entries from the database, etc. | |
| Mar 20, 2012 at 9:11 | vote | accept | eleanor | ||
| Mar 20, 2012 at 9:11 | vote | accept | eleanor | ||
| Mar 20, 2012 at 9:11 | |||||
| Mar 13, 2012 at 10:31 | comment | added | freddyb | My main point was, that sqlmap does something sophisticated. Using SQL Syntax and checking the output variation. But there are fuzzers which stick to specific languages (i.e. JavaScript) as well. My reasoning is slightly flawed, I'm afraid ;) -- But! Sqlmap is doing black-box analysis and not hoping for application crashes. That's imho a notable criterion to distinguish vulnerability scanners from fuzzers. | |
| Feb 19, 2012 at 0:23 | comment | added | eleanor | So what you're saying is that fuzzing can only detect buffer overflows - conditions when the malicious input was sent to the program, which caused it to crash? So any other types of vulnerabilities are discovered by vulnerability scanners. This site gpo.zugaina.org/dev-db/sqlmap/euscan says that the sqlmap is a python based fuzzer. Can you provide me with more details what vulnerability types a fuzzer can detect? Thank you | |
| Feb 18, 2012 at 21:43 | history | answered | freddyb | CC BY-SA 3.0 |