What is the meaning of Fuzz testing in english?

( 5 ) 1 Rating
 1 views  .  0 comments  .   0 up votes .    0 down votes . shares 0 Download Solution PDF tuteeHUB earn credit +10 pts

Answer: Fuzz testing

Fuzz testing, also known as fuzzing or monkey testing, is a technique used to test SOFTWARE for unknown vulnerabilities. The fuzz testing process is automated by a program known as a fuzzer. This program comes up with a large amount of data to send to the target program as input. If the target program crashes or behaves in an undesirable way, the fuzzer makes a log of the input that caused the error.

Hackers often use fuzzers to look for vulnerabilities in software, probing it for weaknesses they can exploit. Software developers can use a fuzzer to anticipate and defend against those types of attacks.

Origin

The first fuzzer was written in the early 1980s by developer Steve Capps to test for weakness in programs for the Macintosh computer. He called his program "The Monkey," referring to the classic adage of a monkey pressing random keys on a typewriter for an infinite amount of time. The theory is that given enough time, the monkey will eventually write the complete works of Shakespeare. Although this approach to software testing is often called "fuzzing," it is also called "monkey testing" because of Capps' program.

List of fuzzers

Fuzzing techniques help with software testing, and many fuzzers exist for specific purposes.

The following is a list of fuzzers, most of them being open-source and many still in active development.

Fuzzer Name/URLDescription
Google SanitizersA group of FOUR data sanitizers developed at Google, which use fuzzing to detect program errors:
  • AddressSanitizer, which detects memory address errors in C and C++ programs.
  • LeakSanitizer, which detects memory leaks.
  • ThreadSanitizer, which detects race conditions in C++ and Go.
  • Memory Sanitizer, which detects uninitialized memory.
afl-fuzzAmerican Fuzzy Lop, a tool which uses genetic algorithms to test the SECURITY of compiled programs.
BackfuzzA protocol fuzzing toolkit.
BrundleFuzzA distributed fuzzer for Windows and Linux.
CERT FOEFailure Observation Engine, a tool developed by CERT which uses mutational fuzzing to detect vulnerabilities in Windows programs.
CERTfuzzThe source code of CERT FOE.
ChoronzonAn evolutionary knowledge-based fuzzer.
DiffyA tool developed by Twitter to discover vulnerabilities in web services.
DizzyA fuzzing library for Python
dfuzzerA fuzzing tool for testing processes that communicate through the D-Bus IPC and RPC mechanism.
dotdotpwnA tool to test web applications for path traversal vulnerabilities.
DranzerA fuzz tester for ActiveX controls.
EMFFuzzerAn Enhanced Metafile fuzz tester.
ExploitableAn extension for GDB (the GNU debugger) that analyzes Linux executables and classifies their bugs by severity according to known exploits. Originally developed at CERT.
Go-fuzzA fuzz tester for Go programs that populates their objects with random values.
grrTranslates 32-bit binaries to 64-bit, fuzzing them as part of the process.
honggfuzzEvolutionary, feedback-driven fuzzer for hardware and software.
HTTP/2 FuzzerA fuzzer for HTTP/2 applications, still available for download but no longer actively developed.
HodorA "slightly more than totally dumb" (brute force) fuzzer.
iFuzzerA fuzzer written in Python which uses Mercurial and Valgrind.
KEMUfuzzerA fuzzer for virtual machines running on QEMU, VMware, VirtualBox, or BHOCS emulation platforms.
KernelFuzzerA fuzzer for kernel system calls.
LibFuzzerA library for in-process, evolutionary, coverage-guided fuzz testing.
NetzobA fuzzer for reverse-engineering communications protocols.
Neural FuzzerA fuzzer that uses machine learning (neural networks) to perform its testing.
NightmareA distributed fuzzer with web-based administration tools.
PathgrindPath-based dynamic analysis for 32-bit applications.
Perf-fuzzerA fuzzer specifically designed to test the perf_event_open() system call in the Linux kernel.
PulsarA fuzzer which "learns" protocols.
PyJFuzzA Python JSON fuzzer.
QuickFuzzAn experimental grammar fuzzer written in Haskell.
RadamsaA general-purpose fuzzer.
RandyA simple Python fuzzer that generates random input for the tested program.
sfuzzSimple fuzz. "Exactly what it sounds like — a simple fuzzer." Included as part of the Kali Linux toolset.
skipfishA web application security scanner developed at Google.
syntribiosAn automated fuzz tester for web APIS, written in Python and maintained by the OpenStack Security Group.
TriforceAFLA full-system fuzzer that uses QEMU.
WapitiA web application vulnerability scanner.
WfuzzA brute-force fuzzer for web applications.
zzufA deterministic, transparent application input fuzzer that randomly changes bits in a file's input operations.

The following are fuzzing harnesses, or frameworks, which helps you manage your fuzz testing.

Fuzzing FrameworkDescription
CERT BFFThe BFF (Basic Fuzzing Framework), developed by CERT, designed to find vulnerabilities in Windows, macOS, and Linux applications.
FuzzFlowA fuzzing framework in AngularJS.
FuzzinatorA framework for random fuzz testing.
FuzzLabsA general-purpose fuzz testing framework.
GrinderA fuzz testing automator/framework for testing web browsers.
KittyA fuzz testing framework written in Python.
ofuzzA fuzzing framework written in OCaml.
NodefuzzA fuzz testing framework for web browsers, written in nodejs.
PassiveFuzzFrameworkOSXA fuzzer for testing vulnerabilities in the macOS kernel.
Peach FuzzerA platform for fuzz testing that can "test virtually any system for unknown vulnerabilities."
RamFuzzA fuzzer for testing the individual parameters of object methods.
SulleyA "fully-automated and unattended, pure Python" fuzzing framework.
FunFuzzerA Python fuzzing harness for JavaScript engines and DOM renderers, by Mozilla.

tuteehub_quiz
Take Quiz To Earn Credits!

Turn Your Knowledge into Earnings.






Report
Write Your Comments or Explanations to Help Others


Comments(0)



Tuteehub Dictionary Web Story
F - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
T - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
Microsoft Windows Help in Computer Definitions
Tuteehub Dictionary Web Story
N - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
O - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
P - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
Q - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
R - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
S - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
Y - Definitions in Computer Definitions
Tuteehub Dictionary Web Story
X - Definitions in Computer Definitions


Ever curious about what any word really means? Dictionary has got them all listed out for you to explore. Simply,Choose a subject/topic and get started on a self-paced learning journey in a world of word meanings and translations.

open app imageOPEN APP