maxtac-dast-fuzzer

What problem does it solve?

This Skill provides dynamic binary fuzzing capabilities for discovering vulnerabilities in binary applications.

Core Features & Use Cases

• Fuzzing: Offers dynamic fuzzing for parsers, native libraries, kernels, protocols, managed runtimes, and more.
• Persistence: Ensures all fuzzing inputs, scripts, and artifacts are saved for analysis and evidence collection.
• Campaign Management: Manages fuzzing campaigns with specific configurations, targets, and tools.
• Use Case: Ideal for researchers and developers who need to conduct targeted fuzzing on binary applications to uncover vulnerabilities.

Quick Start

Initialize a new fuzzing campaign using the provided scripts:

python3 <skill-dir>/scripts/fuzz-campaign.py init \\
  --target "parser component" \\
  --target-version "1.2.3 build 456" \\
  --tool AFL++ \\
  --version-command "afl-fuzz -V" \\
  --scope "authorized local test target" \\
  --environment "local Windows test host" \\
  --rate-limits "local only" \\
  --instrumentation "ASan + coverage" \\
  --command "afl-fuzz -i seeds -o out -- ./harness @@" \\
  --harness ./harness.cc \\
  --seed-corpus ./seeds