Generate context-aware fuzz test inputs targeting input parsing code vulnerabilities.
npx skills add https://github.com/florianbuetow/claude-code --skill fuzz-florianbuetow
Please help me install this Agent Skill. Skill: fuzz Source: https://github.com/florianbuetow/claude-code/tree/main/plugins/appsec/skills/fuzz Command: npx skills add https://github.com/florianbuetow/claude-code --skill fuzz-florianbuetow
This Skill automates the generation of intelligent, context-aware fuzz test inputs to uncover vulnerabilities in input parsing and processing code.
Use the fuzz skill to generate deep fuzz inputs for the 'email' input field in 'src/api/users.ts'.
High-intent search queries and answers about installing and using this skill.
To generate fuzz test inputs for API endpoints and file parsers, analyze the input parsing code to produce context-aware payloads like boundary values, type confusion, and encoding edge cases. The process yields structured JSON test case sets for integration with test harnesses.
Context-aware fuzzing for security testing is a vulnerability discovery method that analyzes input parsing code to generate tailored malicious payloads. It targets specific input handlers like CLI arguments with boundary values and injection payloads rather than random data generation.
Yes, you can use automated payload generation for path traversal and content-type manipulation testing. By analyzing input parsing code, the generation creates tailored malformed file inputs to test API resilience against specific security vulnerabilities.
Yes, fuzzing depth affects the test case sets produced for input validation. You can select quick, standard, deep, or expert fuzzing depths to vary the testing rigor and the comprehensiveness of the generated boundary values and injection payloads.
The best way to integrate generated fuzz inputs into an existing test harness is to utilize the structured JSON test case sets produced by the input analysis. These JSON sets containing context-specific injection payloads can be parsed and passed to test harnesses.
aresbitGenerate and test arbitrary inputs against OCaml encoders and parsers.
trailofbitsValidate cryptographic implementations against Wycheproof test vectors for AES-GCM, ECDSA, EdDSA, and RSA.
djankiesValidate external data against Zod schemas for runtime type safety.
elizaOSGenerate Claude Code skills from the Trail of Bits Application Security Testing Handbook.
