Here Comes the Fuzz

iDEFENSE released a couple of new tools that help find vulnerabilities. Filefuzz for Windows and SpikeFuzz for Linux are both format fuzzing tools that can be used to look for problematic areas in file formats. The tools let you change files bit by bit and then launch the file's associated application to see if it raises an exception. You can download them both at iDEFENSE's Web site .