Penetration Testing mailing list archives

Looking for a fuzzer/source code analyzer on customer developed code


From: sudhakar () CS Princeton EDU
Date: Mon, 17 Mar 2008 16:57:03 -0400 (EDT)



Hi all,

I am looking for a good fuzzer, against some custom code developed internally. I am looking for a tool to stress test application by:

- open many netork connections to application
- throw random data to applications to get them to crash
- fuzz web services


  Idea is to add a quality gate for developers before they push code out.

Does anyone have any ideas on how to approach the problem? Any source code analyzer out there to do this?


Thanks in advance for your ideas.


Regards,
--Sudhakar



------------------------------------------------------------------------
This list is sponsored by: Cenzic

Need to secure your web apps NOW?
Cenzic finds more, "real" vulnerabilities fast.
Click to try it, buy it or download a solution FREE today!

http://www.cenzic.com/downloads
------------------------------------------------------------------------


Current thread: