memory-corruption

Hunt memory-corruption vulnerabilities in C/C++/Rust binaries through fuzzing and crash triage.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/AshtonVaughan/bountyhound --skill memory-corruption
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: memory-corruption
Source: https://github.com/AshtonVaughan/bountyhound/tree/main/bountyhound/skills/memory-corruption
Command: npx skills add https://github.com/AshtonVaughan/bountyhound --skill memory-corruption

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Memory-safety bugs in C/C++/Rust binaries are pervasive and can lead to crashes, data corruption, or remote code execution, and this skill provides a structured methodology to hunt memory-corruption vulnerabilities across targets using theory, fuzzing, and crash triage.

Core Features & Use Cases

  • Phase-driven memory-safety assessment including target assessment, taint analysis, fuzzing harness, and crash triage.
  • Guidance for reproducible exploitability assessment and robust bug-bounty reporting.
  • Real-world use cases across memory-safety: auditing binary parsers, network services, and native components in security-critical projects.

Quick Start

Identify a target with possible memory-safety issues, set up a fuzzing harness, and begin crash triage to locate memory-corruption vulnerabilities.

Frequently Asked Questions about memory-corruption

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find memory corruption bugs in C/C++ binaries?

To find memory corruption bugs in C/C++ binaries, use a structured methodology combining binary auditing, fuzzing harnesses, and crash triage to detect memory-safety issues and assess exploitability.

What is taint analysis used for in memory-safety vulnerability hunting?

Taint analysis in memory-safety vulnerability hunting tracks untrusted data flow through native binaries to identify paths where memory corruption could occur, guiding targeted fuzzing and crash triage efforts.

Can I use fuzzing harnesses to triage crashes in Rust binaries?

Yes, you can use fuzzing harnesses to triage crashes in Rust binaries; the skill provides phase-by-phase guidance and harness templates for memory-safety assessment across C/C++/Rust targets.

What's the best way to report memory corruption bugs for bug bounty programs?

The best way to report memory corruption bugs for bug bounty programs is using structured reporting templates that document crash triage, exploitability assessment, and reproducible steps for authorized targets.

Does this memory-safety assessment approach work for network services and binary parsers?

Yes, this memory-safety assessment approach works for network services and binary parsers, providing real-world auditing guidance for native components in security-critical projects under authorized testing.

When should I not use fuzzing for memory corruption detection?

You should not use fuzzing for memory corruption detection on targets without authorized testing permission, as this skill applies to open-source and proprietary targets strictly under authorized bug bounty programs.