Re: Wireshark output file - any uber wireshark users?
"Fuzz testing or fuzzing is a software testing technique, often automated or semi-automated, that involves providing invalid, unexpected, or random data to the inputs of a computer program. The program is then monitored for exceptions such as crashes, or failing built-in code assertions or for finding potential memory leaks. Fuzzing is commonly used to test for security problems in software or computer systems."
"SQL injection is a code injection technique, used to attack data driven applications, in which malicious SQL statements are inserted into an entry field for execut1on (e.g. to dump the database contents to the attacker).[1] SQL injection must exploit a security vulnerability in an application's software, for example, when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements or user input is not strongly typed and unexpectedly executed. SQL injection is mostly known as an attack vector for websites but can be used to attack any type of SQL database."
As the text appears random and is being inputted against logins, p/w, email addys etc; do you think this could be a fuzzing test / SQL injection?
I haven't seen "&doEditUser=Add+User+Data" before - so not sure what this means!
Reply With Quote
Social Networking Bookmarks