Questions

  1. Can I perform fuzzing on SSL-based web applications?

  2. Are these fuzzers (the ones mentioned in this chapter) supported in Windows?

  3. Do I need to perform fuzzing in all web application penetration tests?

  4. What kinds of vulnerabilities will I find if I perform fuzzing?