> there’s even an argument if it’s fuzzing if it’s random One of the most important but oft overlooked aspects of proper fuzz testing is the corpus and mutatio

> there’s even an argument if it’s fuzzing if it’s random One of the most important but oft overlooked aspects of proper fuzz testing is the corpus and mutation of the inputs from it. Detractors of fuzz testing often argue that they don’t see the value of it but they load up an empty corpus with a dumb fuzzer and wonder why they see thin to no results. In my experience, you need to properly maintain a corpus to see the benefits of fuzz testing, and it’s often best to try starting from blank as well as from an existing corpus. For example, when fuzzing Go, I have used the AFL corpus with good results, since it comes preloaded with a bunch of error causing inputs.