A security tester is evaluating a newly developed API that parses uploaded XML documents. The tester wants to systematically feed the application large volumes of malformed, unexpected, and random input to discover crashes, memory faults, and unhandled exceptions before attackers do. Which testing technique BEST fits this objective?