A fuzzer is a tool that generates malformed input to try and trigger crashes in ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		charleslmunger on Nov 27, 2014 \| parent \| context \| favorite \| on: American fuzzy lop A fuzzer is a tool that generates malformed input to try and trigger crashes in parsers, usually with the hope of finding a bug that can be turned into a security exploit.

zurn on Nov 27, 2014 [–]

Parsing bugs is one category of tickled bugs, another is correctly encoded values that confuse the deeper logic layers. Eg heartbleed was the latter.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact