Well, you sort of hit the nail on the head, but with a few more advanced techniques to amp the process up. Essentially, a fuzzer is a vulnerability finding too

Well, you sort of hit the nail on the head, but with a few more advanced techniques to amp the process up. Essentially, a fuzzer is a vulnerability finding tool that automates the process of injecting randomized values into input fields, and then tracking what breaks. Different modules can create different types of input that are likely to cause certain types of faults. Peruse the documentation of one of the established fuzzers to see it in action (see my other comment.)