3 ms·
> Custom fuzzing was surprisingly effective. A couple years into our code auditing, I started requiring all our code audits to include making a custom fuzzers t
by yardstick 4y ago
> Custom fuzzing was surprisingly effective. A couple years into our code auditing, I started requiring all our code audits to include making a custom fuzzers to test product APIs, authentication, etc.
Any recommendations for a good fuzzing tool for testing both web-based APIs and language specific APIs (C and Java in my case)?
- asicsp 4y agoThese might help: * https://github.com/Endava/cats https://github.com/Endava/cats * https://github.com/google/oss-fuzz https://github.com/google/oss-fuzz
- deptm 4y agoPaid but integrates with CI/CD - https://www.code-intelligence.com/ https://www.code-intelligence.com/
- agumonkey 4y agoI'm thinking about introducing fuzzing too. And property based testing. Manual testing only is too limited.