Idea: Continue Fuzzing After Mutation If SUT Responds With A Valid Response

[jtpereyda]

This requires the fuzzing code to provide a parser and response handler that can indicate whether a response was valid. Might be more work than is worthwhile.

[SR4ven]

Just an idea:

• Send a normal request at the beginning and save the received data
• Send fuzzed data
• Send normal request again and compare the received data with the previously saved data.

That way it would be possible to verify that the SUT still works flawlessly. It would not work for protocols containing time/date fields without adding any kind of parsing.