fuzzing-dictionary

Generate domain-specific token dictionaries for fuzzing parsers, protocols, and file formats.

Updated Jun 9, 2026

Search Tags:#security #fuzzing #protocol testing #parser testing #file format testing

Ready to run

npx skills add https://github.com/iiammae/opero --skill fuzzing-dictionary-iiammae

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fuzzing-dictionary
Source: https://github.com/iiammae/opero/tree/main/.agents/skills/fuzzing-dictionary
Command: npx skills add https://github.com/iiammae/opero --skill fuzzing-dictionary-iiammae

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps developers and security professionals by providing a structured set of domain-specific tokens to guide fuzzers, enabling them to identify and test for vulnerabilities in parsers, protocols, and file formats more effectively.

Core Features & Use Cases

Domain-Specific Tokens: Offers a comprehensive list of keywords, magic numbers, and protocol commands to guide fuzzers.
Protocol and Format Support: Supports fuzzing of parsers, protocols, and file format handlers like JSON, XML, HTTP, DNS, and more.
Use Case: For instance, when developing a network protocol, this Skill can help identify vulnerabilities in the protocol handler by guiding the fuzzer with protocol-specific tokens.

Quick Start

Create a dictionary file using the SKILL.md instructions, then run your fuzzer with the -dict flag pointing to your dictionary file.

Frequently Asked Questions about fuzzing-dictionary

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I guide fuzzers with domain-specific tokens for parser testing?▼

To guide fuzzers with domain-specific tokens for parser testing, you generate a dictionary file containing keywords, magic numbers, and protocol commands, then pass it to your fuzzer using the dictionary flag to improve input validation checks.

What is a fuzzing dictionary and when do I need one for security testing?▼

A fuzzing dictionary is a structured set of domain-specific tokens used to guide fuzzers during security testing. You need one when testing parsers, protocols, or file format handlers to help the fuzzer identify vulnerabilities more effectively.

Does this fuzzing dictionary approach work with libFuzzer and AFL++?▼

Yes, this fuzzing dictionary approach works with external fuzzing tools and libraries like libFuzzer, AFL++, and cargo-fuzz. You create the dictionary file and run your supported fuzzer with the dictionary flag pointing to it.

How do I fuzz a network protocol handler using protocol-specific tokens?▼

To fuzz a network protocol handler, use a dictionary containing protocol-specific tokens like commands and magic numbers. This guides the fuzzer to generate structured inputs, helping identify vulnerabilities in the protocol handler more effectively.

Can I use these domain-specific tokens for file format testing like JSON and XML?▼

Yes, you can use these domain-specific tokens for file format testing. The tokens support fuzzing file format handlers including JSON, XML, HTTP, and DNS by providing relevant keywords to guide the fuzzer.

What are the limitations of using a fuzzing dictionary for vulnerability testing?▼

The main limitation of using a fuzzing dictionary is that it requires external fuzzing tools and libraries to function. The dictionary only provides domain-specific tokens to guide the fuzzer and does not perform the vulnerability testing itself.