3 ms·
Is there a fuzzing tool oriented towards web applications? Something that could generate loads of Selenium cases automatically and verify whether the applicatio
by polskibus 8y ago
Is there a fuzzing tool oriented towards web applications? Something that could generate loads of Selenium cases automatically and verify whether the application crashes, logs an exception or continues to work smoothly??
- zdragnar 8y agoThere are a boatload of pentesting (i.e. penetration testing) tools that use fuzzing. Just be sure that your sysadmin and / or your cloud provider are aware that you intend on running such a test, as that's a really quick way to accidentally bring down servers you weren't anticipating would be connected, or get your IP address banned for DDOS attacks (looking at you, junior QA guy who had good intentions but caused all sorts of havoc). Edit: Just realized I didn't quite address your question fully. https://pentest-tools.com/home https://pentest-tools.com/home is an online service that will run tests, including URL fuzzing and what not. All of the features they offer can also be found in open source and proprietary software. Not sure about saving failed tests as selenium tests for re-running in the future, though I imagine that you'd just re-run the same tool in the first place.
- polskibus 8y agoWhat open source did you mean? I'd like to run such tests on the intranet, without access to any SaaS.
- babayega2 8y agoLast time I tested https://github.com/s0md3v/XSStrike https://github.com/s0md3v/XSStrike whith some quite interesting results. It's important to note that it's not a fizzbuzz tool, but just a pentest one.