Fuzz testing is used to identify coding

errors and security loopholes in an application.

By inputting a massive amount of random

data to the system in an attempt to make

it crash to identify if anything breaks

in the application.

As a final test before we validate our application we need to fuzz all the endpoints of our APIs. When fuzzing we will send random data to those API endpoints and we need to carefully inspect the results. Our server should not crash from this unexpected traffic and it should not display any odd behavior. Based on a risk analysis, fuzz testing might be performed much more structured or not at all.