An internal penetration tester finds a legacy application that takes measurement input made in a text box and outputs a specific string of text related to industry requirements. There is no documentation about how this application works, and the source code has been on Which of the following would BEST allow the penetration tester to determine the input and output relationship? a. Running an automated fuzzer
b. Constructing a known cipher text attack
c. Attempting SQL injection commands
d. Performing all packet capture
e. Using the application in a malware sandbox