skills.rest
riparino
riparinoCOMMUNITY
Explore all skills by this author →
GitHub

defensive-fuzzing

Implement defensive fuzzing with AFL++ and libFuzzer in CI/CD pipelines.

1|Updated Apr 27, 2026
Search Tags:#ci-cd#fuzzing#security-testing#web-fuzzing#afl++#crash-triage#defensive-fuzzing
One-click install
npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-fuzzing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: defensive-fuzzing
Source: https://github.com/riparino/Claude-Cyber/tree/main/Claude-Blue/Skills/defensive-fuzzing
Command: npx skills add https://github.com/riparino/Claude-Cyber --skill defensive-fuzzing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill provides a defensive fuzzing workflow to proactively discover vulnerabilities in software assets before attackers exploit them.

Core Features & Use Cases

  • Integrates AFL++ and libFuzzer-based fuzzing for native and managed code
  • Supports OSS-Fuzz, jazzer (Java), and web endpoint fuzzing within CI/CD pipelines
  • Provides crash triage, coverage analysis, and automated reporting to accelerate remediation

Quick Start

Configure your CI pipeline to run fuzzing harnesses against your targets and monitor crashes and coverage

Frequently Asked Questions about defensive-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I integrate fuzzing into a CI/CD pipeline to catch security vulnerabilities?▼

Integrate fuzzing into CI/CD pipelines by configuring automated fuzzing harnesses to run against software targets, monitoring for crashes, and analyzing coverage. This workflow automates vulnerability discovery and provides reporting to accelerate remediation.

What is defensive fuzzing and when should I use it?▼

Defensive fuzzing proactively discovers vulnerabilities in software assets before attackers exploit them. Use it to reveal security flaws early by applying automated testing techniques like crash triage and coverage analysis across your codebase.

Does defensive fuzzing work with AFL++ and libFuzzer for native code?▼

Defensive fuzzing integrates AFL++ and libFuzzer-based fuzzing for native and managed code. It supports configuring harnesses for these engines to continuously test targets and identify potential security flaws.

Can I use fuzzing for Java applications and web endpoints?▼

Fuzzing supports jazzer for JVM applications and web endpoint fuzzing within CI/CD pipelines. This allows you to apply automated vulnerability discovery to both managed Java code and web-facing API targets.

What's the best way to automate crash triage after finding vulnerabilities?▼

Automate crash triage by integrating it directly into your CI/CD fuzzing pipeline. This provides automated crash reporting and coverage analysis, accelerating the remediation of discovered vulnerabilities.

What is the role of OSS-Fuzz in continuous vulnerability discovery?▼

OSS-Fuzz supports continuous defensive fuzzing workflows within CI/CD pipelines. It helps automate the execution of fuzzing harnesses, providing ongoing coverage analysis and crash triage to reveal vulnerabilities.

Related Skills

Explore More Software Engineering Skills→
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

atheris

Fuzz Python code and C extensions with coverage-guided Atheris.

Official
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

risk-prioritization-framework-for-engineers

Prioritize vulnerability remediation using CVSS scores and decision trees.

Official
Advanced
AcczdyAcczdy
2

performing-fuzzing-with-aflplusplus

Automate coverage-guided fuzzing of compiled binaries with AFL++.

Community
Advanced
riparinoriparino
1

offensive-bug-identification

Identify and classify software vulnerabilities across source, binary, and runtime contexts.

Community
Advanced