A fuzzer is a fuzzing tool that provides crafted input to the target application to discover vulnerable user input fields.

  • A generation-based fuzzer generates malicious input from scratch based on given protocols
  • A mutation-based fuzzer modifies valid inputs using techniques such as bit-flipping.
  • A smart fuzzer is a fuzzer that understands the input format.