I need to fuzz a communication between a client-server application written in Java. Already set up a MITM (burp), so I am able to see every request. The request body is a soap-xml document where some keys are exchanged. I would like to fuzz the request header and the request body also, where the keys are placed. What would be the best choice? Is there any fuzzer which is suited more to request header or to the xml body fuzzing? Is there any preferred libary/fuzzer for fuzzing Java?
I would look at using the Intruder in Burp Suite.
as you can see, we have replaced the headers and can see the responses