Question
A security engineer receives reports through the organization's bug bounty program about remote code execution in a specific component in a custom application. Management wants to properly secure the component and proactively avoid similar issues. Which of the following is the best approach to uncover additional vulnerable paths in the application?
- A. Leverage an exploitation framework to uncover vulnerabilities.
- B. Use fuzz testing to uncover potential vulnerabilities in the application. Correct
- C. Utilize a software composition analysis tool to report known vulnerabilities.
- D. Reverse engineer the application to look for vulnerable code paths.
- E. Analyze the use of an HTTP intercepting proxy to dynamically uncover issues.
Explanation
Fuzz testing feeds large volumes of malformed and unexpected input into the component and its interfaces, which exercises many code paths and exposes the crashes and memory-handling flaws that typically lead to remote code execution. An exploitation framework only uses known exploits, and software composition analysis only reports known vulnerabilities in third-party libraries, so neither finds new flaws in custom code. Reverse engineering is unnecessary for the organization's own application, and an intercepting proxy is a manual, web-focused technique with far less coverage.
