Skip to content

fuzz: Fix breadth first handling#7369

Open
kingthorin wants to merge 3 commits into
zaproxy:mainfrom
kingthorin:fuzz-breadth-depth
Open

fuzz: Fix breadth first handling#7369
kingthorin wants to merge 3 commits into
zaproxy:mainfrom
kingthorin:fuzz-breadth-depth

Conversation

@kingthorin

@kingthorin kingthorin commented May 19, 2026

Copy link
Copy Markdown
Member

Overview

  • Fix multi-location breadth payload combination (was incorrectly using depth-first-style iteration).
  • Rename strategies to Cluster Bomb and Pitchfork in code, UI, help, and tests; keep legacy depth/breadth config values working.
  • Update WebSockets fuzz handler for renamed Fuzzer replacer classes. (Build file was previously updated.)

From the payload lists 1,2,3 and a,b,c Pitchfork produces:
image

Related Issues

AI Disclosure

Cursor was used in the preparation of this change/PR.

@kingthorin kingthorin marked this pull request as draft May 19, 2026 14:54
@psiinon

psiinon commented May 19, 2026

Copy link
Copy Markdown
Member

Logo
Checkmarx One – Scan Summary & Detailsfa488bda-8a04-4f7f-8063-1d5c250159be

Great job! No new security vulnerabilities introduced in this pull request


Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from d97b65b to eacefd6 Compare May 19, 2026 15:34
@kingthorin kingthorin marked this pull request as ready for review May 19, 2026 15:35
@thc202

This comment was marked as outdated.

@kingthorin

This comment was marked as outdated.

@thc202

This comment was marked as outdated.

@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from eacefd6 to 8024737 Compare May 20, 2026 13:41
@kingthorin kingthorin changed the title fuzz: Fix breadth/depth handling fuzz: Remove breadth-first UI and migrate config May 20, 2026
@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from 8024737 to 39cff9b Compare May 20, 2026 13:42
@thc202

This comment was marked as outdated.

@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from 39cff9b to 6ad37b9 Compare May 20, 2026 13:58
@kingthorin kingthorin changed the title fuzz: Remove breadth-first UI and migrate config fuzz: Remove (hide) strategy UI components May 20, 2026
@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from 6ad37b9 to d63851b Compare May 20, 2026 14:04
@kingthorin

This comment was marked as outdated.

@kingthorin kingthorin marked this pull request as draft May 20, 2026 17:45
@kingthorin

This comment was marked as outdated.

@kingthorin kingthorin marked this pull request as ready for review May 21, 2026 10:01
@kingthorin

This comment was marked as outdated.

@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from d63851b to 1e06a97 Compare May 27, 2026 23:46
@kingthorin kingthorin changed the title fuzz: Remove (hide) strategy UI components fuzz: Fix breadth first handling May 27, 2026
## Unreleased

### Changed
- Update for Fuzzer payload replacement strategy changes (Cluster Bomb and Pitchfork).

@kingthorin kingthorin May 27, 2026

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe this should just be "Maintenance changes"? 🤷

Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
Signed-off-by: kingthorin <kingthorin@users.noreply.github.com>
@kingthorin kingthorin force-pushed the fuzz-breadth-depth branch from 63ed5d9 to 7b7a3e7 Compare June 2, 2026 14:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants