Practical Security Automation and Testing

Step 2 – generating the Security Random Payloads

Here are some examples of data generation based on a given data sample:

• Generating email-format fuzz data:

      $ echo "[e-mail]" | radamsa -n 5 --patterns od

• Generating SQL injection-related fuzz data:

      $ echo "' or 1=1" | radamsa -n 5 --patterns od

• Generating JavaScript injection data:

      $ echo "<script>alert(1)</script>" | radamsa -n 5 --patterns od

• Generating the XXX-XXX-XXXX format-based fuzz data:

      $ echo "154-541-3214" | radamsa -n 5 --patterns od

• Generating date-format fuzz data:

      $ echo "1977-12-01" | radamsa -n 5 --patterns od

The use of Radamsa enables us to dynamically generate fuzz data based on a sample input. Then, we can use that generated fuzz data as data input sources ...