help.topics-02.html Maven / Gradle / Ivy
Graphing Tab
This tab graphs any data collected during fuzzing. This tab can offer a clear indication of a response that is different then the rest received, an indication of further examination being required.
Getting Started: Having selected the graphing tab, click "Start" in the tool bar menu. Select one of the directories, right click "Graph" in order to generate all the graphs for that fuzzing session.
The following graphs are available:
Status Code Pie Chart A pie chart with all the different type of response status codes (e.g. 200, 404, etc.) received for each request sent. If no status code could be identified, the value "---" will be included in the chart.
Response Time Bar Chart A bar chart with the response time from beginning to send each request, to closing the respective connection after receiving the data. Each response is measured in milliseconds. A negative value indicates that the file's response time could be read.
Response Size Bar Chart A bar chart with the response size for each request, measured in bytes. This does not include any of the comments placed on the top of the file, indicating the request sent in JBroFuzz format.
Jaccard Index A bar chart with the Jaccard similarity coefficient, in the range of [0, 1]. Based on the characters of the first response received, the ratio of the intersection of the unique characters in the current response with the unique characters in the first response, over the union of the unique characters in the current response with the first response.
(JBroFuzz Jaccard Similarity Coefficient) = |(Unique Characters in First Response) ∩ (Unique Characters in Current Response)| / |(Unique Characters in First Response) ∪ (Unique Characters in Current Response)|
Hamming Distance A bar chart with the hamming distance of the characters in the response, relative to the first response received. Check each character of the first response received, against the character at the same position of the current response received. If they are not identical, increment the hamming distance.
Response Header A bar chart with the response header size for each request, measured in bytes. This does not include any of the comments placed on the top of the file, indicating the request sent in JBroFuzz format.
Jaccard Index
As a ratio of what is common with the first response, over what is available, measuring the Jaccard index on the character level for each response, can give a clear indication of a different response received.
Hamming Distance
Measuring the Hamming distance on the character level for each response received and, relative to the first response shows the number of characters that are different at each part of the response.