Instead of pure random data, fuzzers can use &#x27;attack heuristics&#x27; to try and minimize the search space. These are specific patterns that are more likely to expose bugs, based on previous vulnerabilities and known coding errors. For example using &#x27;%n%n%n%n%n&#x27; many times to exploit C-style format string stack vulnerabilities.<p>Mozilla started a project known as FuzzDB to collect these heuristics, although it doesn&#x27;t appear to have been maintained recently.<p>Here&#x27;s some examples from FuzzDB:
<a href="https:&#x2F;&#x2F;code.google.com&#x2F;p&#x2F;fuzzdb&#x2F;source&#x2F;browse&#x2F;trunk&#x2F;attack-payloads&#x2F;format-strings&#x2F;format-strings.txt" rel="nofollow">https:&#x2F;&#x2F;code.google.com&#x2F;p&#x2F;fuzzdb&#x2F;source&#x2F;browse&#x2F;trunk&#x2F;attack-...</a>