fuzzing-operations-skill

Solid

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

AI & Automation 1,160 stars 71 forks Updated today MIT

Install

View on GitHub

Quality Score: 94/100

Stars 20%
100
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
66
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Fuzzing Operations Skill ## Overview This skill provides comprehensive fuzzing capabilities for automated vulnerability discovery using industry-standard fuzzing frameworks. ## Capabilities - Configure and launch AFL++ campaigns - Build instrumented binaries with coverage - Create and manage seed corpora - Triage and deduplicate crash files - Run afl-tmin and afl-cmin for minimization - Monitor fuzzing progress and coverage - Generate crash reproduction scripts - Support libFuzzer and honggfuzz ## Target Processes - fuzzing-campaign.js - security-tool-development.js - vulnerability-research-workflow.js ## Dependencies - AFL++ (afl-fuzz, afl-gcc, afl-clang-fast) - LLVM (for instrumentation) - Sanitizers (ASAN, MSAN, UBSAN) - libFuzzer (LLVM) - honggfuzz (optional) - Python for crash analysis scripts ## Usage Context This skill is essential for: - Automated vulnerability discovery - Coverage-guided fuzzing campaigns - Crash triage and root cause analysis - Harness development for fuzzing - Integration with CI/CD security testing ## Integration Notes - Supports parallel fuzzing across multiple cores - Can integrate with corpus management systems - Generates reproducible crash test cases - Supports various target types (binaries, libraries, protocols) - Coverage reports in lcov/html format

Details

Author
a5c-ai
Repository
a5c-ai/babysitter
Created
4 months ago
Last Updated
today
Language
JavaScript
License
MIT

Similar Skills

Semantically similar based on skill content — not just same category

AI & Automation Solid

performing-fuzzing-with-aflplusplus

Perform coverage-guided fuzzing of compiled binaries using AFL++ (American Fuzzy Lop Plus Plus) to discover memory corruption, crashes, and security vulnerabilities. The tester instruments target binaries with afl-cc/afl-clang-fast, manages input corpora with afl-cmin and afl-tmin, runs parallel fuzzing campaigns with afl-fuzz, and triages crashes using CASR or GDB scripts. Activates for requests involving binary fuzzing, crash discovery, coverage-guided testing, or AFL++ fuzzing campaigns.

13,115 Updated today
mukul975
Testing & QA Featured

implementing-fuzz-testing-in-cicd-with-aflplusplus

Integrate AFL++ coverage-guided fuzz testing into CI/CD pipelines to discover memory corruption, input handling, and logic vulnerabilities in C/C++ and compiled applications.

13,115 Updated today
mukul975
AI & Automation Solid

fuzzing-apis

This skill enables Claude to perform automated fuzz testing on APIs to discover vulnerabilities, crashes, and unexpected behavior. It leverages malformed inputs, boundary values, and random payloads to generate comprehensive fuzz test suites. Use this skill when you need to identify potential SQL injection, XSS, command injection vulnerabilities, input validation failures, and edge cases in APIs. Trigger this skill by requesting fuzz testing, vulnerability scanning, or security analysis of an API. The skill is invoked using the `/fuzz-api` command.

2,274 Updated today
jeremylongshore
AI & Automation Solid

protocol-fuzzer

Expert skill for protocol fuzzing, vulnerability discovery, and security testing

1,160 Updated today
a5c-ai
AI & Automation Listed

libafl

LibAFL is a modular fuzzing library for building custom fuzzers. Use for advanced fuzzing needs, custom mutators, or non-standard fuzzing targets.

1 Updated 4 days ago
kevinvwong