I'm trying to fuzz an application to make sure it is secure. The app does not have any UI and needs to be run via the cmdline:
myfile.xml looks like this:
<Sample> <FileLocations tmp_root="PathOfExeFile"> <Directory path="DirOfExeFile"> <File id="1" name="filenameonly" hash="filehash" msi_key="filenameonly" remove="1" /> </Directory> </FileLocations> </Sample>
My question is: should I fuzz the file only (and basically try to pass random arguments to it), or should I always pass the same XML file (that I fuzz/edit in before hand)?