skills.rest
Sir-chawakorn
Sir-chawakornCOMMUNITY
Explore all skills by this author →
GitHub

fuzz-dynamic-security-test

Automate coverage-guided fuzzing and DAST scanning of web applications.

9|3|Updated Jun 13, 2026
Search Tags:#testing#security#vulnerability#ci-cd#fuzzing#dast
One-click install
npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill fuzz-dynamic-security-test
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fuzz-dynamic-security-test
Source: https://github.com/Sir-chawakorn/sanook-cli/tree/main/skills/fuzz-dynamic-security-test
Command: npx skills add https://github.com/Sir-chawakorn/sanook-cli --skill fuzz-dynamic-security-test

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of finding deep-seated security vulnerabilities like memory corruption, crashes, and logic flaws in parsers and web applications that static analysis often misses.

Core Features & Use Cases

  • Coverage-Guided Fuzzing: Integrates engines like libFuzzer, AFL++, and go test -fuzz to discover crashes in parsers and input handlers.
  • DAST Integration: Automates security scanning of running applications using tools like OWASP ZAP and nuclei.
  • CI/CD Hardening: Provides a structured approach to regression testing by committing minimized crash inputs to the repository.

Quick Start

Use the fuzz-dynamic-security-test skill to configure a coverage-guided fuzzer for the current project parser and integrate it into the CI pipeline.

Frequently Asked Questions about fuzz-dynamic-security-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up coverage-guided fuzzing for my parser to find memory corruption?▼

Coverage-guided fuzzing targets memory corruption by feeding mutated inputs to your parser. This skill automates deterministic harness creation and corpus management for engines like libFuzzer and AFL++ to discover crashes.

What is the best way to automate DAST scanning for a web application?▼

Automating DAST scanning for a web application involves probing the running app. This skill integrates tools like OWASP ZAP and nuclei to detect logic flaws and known CVEs that static analysis misses.

Can I integrate fuzzing into my CI/CD pipeline for regression testing?▼

Yes, you can integrate fuzzing into CI/CD pipelines for regression testing. This skill provides CI-gated hardening by committing minimized crash inputs to your repository, preventing reintroduced vulnerabilities.

Does dynamic security testing work better than static analysis for finding crashes?▼

Dynamic security testing finds crashes by executing code with mutated inputs, whereas static analysis only reviews source code. This approach discovers deep-seated runtime vulnerabilities that static analysis misses.

When do I need to use fuzzing for my codebase hardening strategy?▼

You need fuzzing for codebase hardening when targeting robust protection against crashes and memory corruption. It is essential for parsers and input handlers requiring validation against unexpected data.

Related Skills

Explore More Software Engineering Skills→
AgentSecOpsAgentSecOps
183

dast-ffuf

Fuzz web applications to uncover hidden directories and endpoints with ffuf.

Official
Advanced
0xazanul0xazanul
43

fuzzing-for-memory-bugs

Identify and confirm memory-safety vulnerabilities in C and C++ via sanitizer-backed fuzzing.

Community
Advanced
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced
zzw4257zzw4257

ModSecurity

Deploys and configures ModSecurity to inspect HTTP traffic and block malicious requests.

Community
Intermediate