Page 1105 - (ISC)² CISSP Certified Information Systems Security Professional Official Study Guide
P. 1105
strings to the end of the content, or perform other data manipulation
techniques.
Generational (Intelligent) Fuzzing Develops data models and
creates new fuzzed input based on an understanding of the types of
data used by the program.
The zzuf tool automates the process of mutation fuzzing by
manipulating input according to user specifications. For example,
Figure 15.10 shows a file containing a series of 1s.
FIGURE 15.10 Prefuzzing input file containing a series of 1s
Figure 15.11 shows the zzuf tool applied to that input. The resulting
fuzzed text is almost identical to the original text. It still contains
mostly 1s, but it now has several changes made to the text that might
confuse a program expecting the original input. This process of slightly
manipulating the input is known as bit flipping.
