Fuzzing with Metasploit
Fuzz testing or Fuzzing is a software testing technique which consists of finding implementation bugs using random data injection. Fuzz scripts generate malformed data and pass it to the particular target entity to verify its overflow capacity. Metasploit provides several fuzzing modules that can be helpful in exploit development. Let us explore more about the basics of fuzzing and how Metasploit modules can be used as potential fuzzers.
Getting ready
Before we jump to Metasploit fuzzer modules, let us have a brief overview of fuzzing and its types.
Fuzzing is treated as a black box testing technique where we test for the maximum overflow capacity of the software. Fuzzing is actively used to find bugs in applications.
Fuzzers can be used to test software, protocols, and file formats. Fuzzers automate the process of data generation and injection. We can control the size of data or packet to be injected.
A fuzzer would try combinations of attacks on:
Numbers (signed/unsigned...
