skills.rest
andrescardonas7
andrescardonas7COMMUNITY
Explore all skills by this author →
GitHub

fuzzing-dictionary

Create dictionary files with domain-specific tokens for fuzzing tools.

Updated Jan 30, 2026
Search Tags:#testing#security#code coverage#vulnerability research#fuzzing#dictionary
One-click install
npx skills add https://github.com/andrescardonas7/salchipapa-web --skill fuzzing-dictionary-andrescardonas7
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: fuzzing-dictionary
Source: https://github.com/andrescardonas7/salchipapa-web/tree/main/.cursor/skills/testing-handbook-skills/fuzzing-dictionary
Command: npx skills add https://github.com/andrescardonas7/salchipapa-web --skill fuzzing-dictionary-andrescardonas7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps fuzzers discover deeper code paths by providing them with domain-specific keywords and tokens, moving beyond purely random input generation.

Core Features & Use Cases

  • Targeted Fuzzing: Guides fuzzers with relevant strings for parsers, protocols, and file formats.
  • Improved Coverage: Increases the likelihood of hitting complex logic and edge cases.
  • Use Case: When fuzzing an HTTP parser, use a dictionary containing common HTTP methods, headers, and status codes to accelerate the discovery of vulnerabilities.

Quick Start

Use the fuzzing-dictionary skill to create a dictionary file for fuzzing a PNG parser.

Frequently Asked Questions about fuzzing-dictionary

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I improve fuzzing code coverage for custom file format parsers?▼

To improve fuzzing code coverage for parsers, provide domain-specific keywords and tokens via dictionary files to guide fuzzers toward deeper execution paths instead of relying on random input.

Does fuzzing with a dictionary work with libFuzzer and AFL++?▼

Yes, fuzzing with a dictionary works with libFuzzer and AFL++. The technique applies domain-specific tokens to guide these fuzzers toward complex logic and edge cases.

What is the best way to start fuzzing an HTTP parser for vulnerabilities?▼

The best way to start fuzzing an HTTP parser is creating a dictionary file containing common HTTP methods, headers, and status codes to accelerate vulnerability discovery.

When do I need a dictionary file for vulnerability research?▼

A dictionary file for vulnerability research is needed when fuzzers struggle to discover deeper code paths through purely random input generation in protocols and format-specific code.

How do I create a fuzzing dictionary for a PNG parser?▼

To create a fuzzing dictionary for a PNG parser, extract domain-specific tokens like magic numbers and format-specific commands, applying them to improve test case generation.

Why does my fuzzer fail to hit complex logic and edge cases?▼

Fuzzers fail to hit complex logic and edge cases because purely random input generation lacks the domain-specific keywords needed to trigger deeper code paths in targeted formats.

Related Skills

Explore More Software Engineering Skills→
keremtoker468-dotcomkeremtoker468-dotcom

fuzzing-dictionary

Generate domain-specific fuzzing dictionaries for libFuzzer, AFL++, and cargo-fuzz.

Community
Intermediate
erenisiklarerenisiklar

fuzzing-dictionary

Create fuzzing dictionaries with quoted strings and hex escapes for libFuzzer, AFL++, and cargo-fuzz.

Community
Advanced
SuperlendSuperlend

fuzzing-dictionary

Provide domain-specific tokens to guide fuzzers during input mutation.

Official
Intermediate
statick88statick88
1

fuzzing-dictionary

Generate domain-specific token dictionaries for fuzzing parsers and protocols.

Community
Intermediate