« Twitter Updates for 2008-01-17 | Home | iPhone iPod Touch Lotus Notes and sametime »
Web Application Security Fuzzing Tools
By Martin English | January 18, 2008
A list of Web Application Security Fuzzing Tools from dragoslungu com.
A Security Fuzzer is a tool designed to provide random data (i.e. fuzzy data) to an application’s parameters. For web application testing, fuzzing means testing especially for buffer overflow, parameter format check, various encoding and error handling, by sending random data to the application - basically to see what happens.
The results of a fuzzing test reveal application vulnerabilities which range from juicy stuff such as improper data sanitizing (which may allow SQL injection) to apparently harmless disclosure of application environment details such as OS version, Application Server version, database details and even private IP disclosure.
1. SPIKE Proxy
2. WebScarab
3. Burp Intruder
4. Wapiti
5. RFuzz The Web Destroyer
6. OWASP WSFuzzer
7. SPI Fuzzer
8. Suru Web Proxy
9. AppScan
10. ASP Auditor
Topics: Code, Security, Technology, Web / Web 2.0 |
Add New Comment
Thanks. Your comment is awaiting approval by a moderator.
Do you already have an account? Log in and claim this comment.
Add New Comment