5 ms·
It seems to me like "fuzzing" has a different meaning in web application penetration testing. Here, "fuzzer" is a term for tools that just generate different re
by codesoap 3y ago
It seems to me like "fuzzing" has a different meaning in web application penetration testing. Here, "fuzzer" is a term for tools that just generate different request using wordlists, without adding any mutations. For example, the two popular tools ffuf [1] and wfuzz [2] also call themselves fuzzers.
I see how reusing a term for a different concept is bothersome, but I feel like "fuzzer" is the term that people learning about bug bounty hunting are familiar with.
[1] https://github.com/ffuf/ffuf https://github.com/ffuf/ffuf
[2] https://wfuzz.readthedocs.io/en/latest/ https://wfuzz.readthedocs.io/en/latest/
- tptacek 3y agoYeah, this is generally what people mean by "web fuzzing".