File upload - fuzzing, tools and techniques

How do you test web application "file upload" feature that would:

also take random input and tail logs (or exception or exit code), to see that this input was effective.

Most of fuzzing tools are either C/C++ oriented, or require some kind of signature file (like from swagger files).

I want to test complex running web application (which may consist of few contains) - provide request parameters to the tool and see if malformed media file or param like cookie can cause issues. submitted by /u/saikek
[link] [comments]


http://dlvr.it/SymLRN