fuzzing-dictionary

Generate domain-specific tokens and magic values for fuzzing parsers and protocol handlers.

Updated Nov 23, 2025
One-click install
npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill fuzzing-dictionary-manuelbrandner85
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fuzzing-dictionary
Source: https://github.com/manuelbrandner85/Weltenbibliothekapp/tree/main/.agents/skills/fuzzing-dictionary
Command: npx skills add https://github.com/manuelbrandner85/Weltenbibliothekapp --skill fuzzing-dictionary-manuelbrandner85

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the common issue of fuzzers failing to reach deep code paths in parsers and protocol handlers due to blind mutation, by providing targeted, domain-specific tokens that guide the fuzzer toward valid input structures.

Core Features & Use Cases

  • Token Injection: Injects magic numbers, protocol keywords, and format-specific strings to bypass initial validation checks.
  • Multi-Fuzzer Support: Compatible with industry-standard tools like libFuzzer, AFL++, and cargo-fuzz.
  • Use Case: When fuzzing a custom network protocol, use this skill to generate a dictionary containing protocol headers and command markers to ensure the fuzzer explores complex state transitions rather than just random noise.

Quick Start

Use the fuzzing-dictionary skill to generate a list of protocol-specific keywords for the target parser and save them to a dictionary file.

Frequently Asked Questions about fuzzing-dictionary

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I improve fuzzer coverage in protocol parsers and file format handlers?

To improve fuzzer coverage, inject domain-specific tokens and magic values that guide the fuzzer past shallow validation logic, enabling the fuzzer to explore deep code paths in parsers and protocol handlers.

Why does my fuzzer fail to reach deep code paths during security testing?

Your fuzzer fails to reach deep code paths because blind mutation generates random noise, causing inputs to be rejected by initial validation checks before triggering complex state transitions.

Can I use a fuzzing dictionary with libFuzzer, AFL++, and cargo-fuzz?

Yes, generated fuzzing dictionaries are compatible with industry-standard tools like libFuzzer, AFL++, and cargo-fuzz, providing structured input generation to enhance security testing across different environments.

How do I generate a dictionary for fuzzing a custom network protocol?

To generate a dictionary for a custom network protocol, extract protocol headers, command markers, and format-specific strings, then save them to a dictionary file to guide your fuzzer.

What are fuzzing dictionaries and when do I need them for security testing?

Fuzzing dictionaries are lists of domain-specific tokens and magic values used to bypass shallow validation logic. You need them when fuzzing file formats, network protocols, and configuration parsers to ensure valid input structures.