10. Web Application and Server Fuzzing: Automation

“The most important thing is for us to find Osama bin Laden. It is our number one priority and we will not rest until we find him.”

George W. Bush, Washington, DC, September 13, 2001

“I don’t know where bin Laden is. I have no idea and really don’t care. It’s not that important. It’s not our priority.”

George W. Bush, Washington, DC, March 13, 2002

Now that we’ve discussed how Web applications could be fuzzed, it’s time to put our theories to the test. In this chapter, we take what we learned in the background chapter and apply it by developing WebFuzz, a graphical Web application fuzzer. We start by planning the design of the application and identifying any unique challenges ...

Get Fuzzing: Brute Force Vulnerability Discovery now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.