In this blog post we look at the concept of “fuzzing”, a technique used in software testing to tease out vulnerabilities that may exist in code – typically relating to the handling of input from users – by testing specific input variants. We focus on fuzzing as it applies to web applications in particular, and how it works under the hood.