Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Fuzz test (framework) web application?

Are there frameworks that can perform fuzztesting on WebApplications? I know that Selenium and WebDriver are used to build tests for web-applications, but I am particulary interested in libraries, frameworks or projects that have fuzz-testing built-in, so I do not need to re-invent the wheel.

For example, I could benefit from these features:

  • randomized link clicking
  • randomized form filling
  • 'back' and 'forward' clicking
  • random mouse movement and clicking
  • javascript support

Does anyone know of project that implements these features? (preferably Java :))

like image 540
Rob Audenaerde Avatar asked May 13 '13 11:05

Rob Audenaerde


3 Answers

I was curious about this as well since we use Selenium/Java here at my office, and did some digging of my own. I found a few links that may be useful to you:

Fuzz Testing - IBM - I suspect you may have already found this link though.

Monkey Fuzz Testing - I know, I know... it's .NET. BUT, it may give you some good ideas as to how to implement it on your end.

Stephen Coldebourne's Blog - This was a great read; well worth your time.

JBroFuzz - This is pretty awesome. That is all.

like image 121
Brian Avatar answered Oct 23 '22 15:10

Brian


As the post tagged "javascript", I'm adding here Gremlins.js which is a testing/fuzzing framework written for Node and browsers. Surprised no one mentioned it yet.

Gremlins.js preview

like image 9
JSmyth Avatar answered Oct 23 '22 16:10

JSmyth


Some new JS Fuzz testing NPM modules now existing. Sadly, many are not widely used, so expect them to need some polish or TLC.

  • fuzzer
  • sorrow
  • javascript-fuzz
  • fuzzur
like image 2
Edmond Meinfelder Avatar answered Oct 23 '22 17:10

Edmond Meinfelder