Black Box Fuzzing

Definitions

1. Fuzz testing performed without internal knowledge of the target's source code or structure, relying instead on observed inputs and outputs. It is useful for finding robustness issues in binaries, protocols, and services when implementation details are unavailable.

   In plain English: Sending many strange inputs to a system to find bugs without knowing how it is built internally.

   Example: "The team used black box fuzzing against the file parser before they had source access from the vendor."

Related Terms

• SAST
• DAST
• Black Box Testing
• Bug Bounty Program
• Burp Suite
• Dynamic Application Security Testing
• Ethical Hacking
• AppSec
• Code Audit
• Fuzzer
• MIME Type Attack
• REST API Security