Fuzzing in Jest
One Unified Workflow for Functional and Security Testing
Most JavaScript developers already use Jest for functional testing. In this coding session, Josh will demo how the integration of Jazzer.js into Jest enables developers to build a unified workflow for both security and functional testing in JavaScript. All with the familiar look and feel of unit tests.
Jazzer.js is a coverage-guided, in-process fuzzer for the entire Node.js platform. It is now integrated into the node package manager (npm) and Jest, making it easily accessible for developers.
This function automatically generates millions of unusual and unexpected test inputs that can trigger functional bugs and security vulnerabilities such as Remote Code Execution, Cross-Site Scripting and SQL Injections. Jazzer.js also provides a regression mode, which is useful in making sure that newly added code doesn’t break existing functionality.
All code examples and tools used are 100% open-source.
https://github.com/CodeIntelligenceTesting/jazzer.js