How to Find Bugs In Java at Scale With CI Fuzz CLI and JUnit | Code Intelligence
In this video, I demonstrate how to use CI Fuzz CLI, a simple and easy-to-use fuzz testing tool, to find unexpected bugs and vulnerabilities in Java software. I walk through the process of setting up and running a fuzz test, including creating a configuration file, adding dependencies to a Maven project, and writing JUnit-compatible fuzz tests. If you're interested in learning more about fuzz testing as a complementary approach to unit testing, this video is for you.
Content:
00:00 Introduction
00:31 Can You Spot the Bug?
03:11 Use Case: Fuzz Testing vs. Unit Testing
09:01 Use Case: Finding SQL Injections With JUnit Compatible Fuzz Tests
Links and Resources:
- Tool: CI Fuzz CLI
- https://github.com/CodeIntelligenceTesting/cifuzz
- Blog: What is Fuzz Testing
- https://www.code-intelligence.com/what-is-fuzz-testing
- Blog: What Bugs Can You Find With Fuzz Testing?
- https://www.code-intelligence.com/blog/what-bugs-can-you-find-with-fuzzing
- Blog: Fuzzing Java Application With CI Fuzz CLI
- https://www.code-intelligence.com/blog/fuzz-java-cifuzz-cli