Fuzzing Improvements

[ThunderSon]

Following #585 I was interested to see that the OWASP Community fuzzing link is really weak.

In addition, through the cleanup, the categories were removed in Appendix C.
Should we look to improve Appendix C, or to make the community link much better and contain techniques and ways to fuzz?

[ThunderSon]

After reviewing both parts, I believe both should be reviewed and stay independent from each other as fuzzing as a topic is much wider than what WSTG is concerned with.

For the WSTG, the appendix needs to:

• Describe what is fuzzing in short.
• Describe the need for fuzzing in short.
• Mention fuzzing tools that the tester can use
• Wordlists and references (which are already set as it is now) that can be used.
• Maybe an example using wfuzz on a certain input value?

We can have sections for the wordlists at a later stage, I don't see it as a crucial point for now.

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

[github-actions]

Please comment if you are still working on this issue, as it has been inactive for 30 days. To give everyone a chance to contribute, we are releasing it to new contributors.

[kingthorin]

Should probably include ffuf

https://twitter.com/Bugcrowd/status/1468604534717132800

[kingthorin]

Another potential ref/source: https://github.com/antonio-morales/Fuzzing101