skills.rest
erkanrzgc
erkanrzgcCOMMUNITY
Explore all skills by this author →
Website𝕏@erkan_rzgcGitHub

offensive-fuzzing

Automate fuzz campaign design and execution across AFL++, libFuzzer, Honggfuzz, Boofuzz, and syzkaller.

1|1|Updated Mar 4, 2026
Search Tags:#automation#testing#security#coverage#fuzzing#harness#crash-triage
One-click install
npx skills add https://github.com/erkanrzgc/cyberm4fia-scanner --skill offensive-fuzzing
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: offensive-fuzzing
Source: https://github.com/erkanrzgc/cyberm4fia-scanner/tree/main/core/ai_skills/offensive-fuzzing
Command: npx skills add https://github.com/erkanrzgc/cyberm4fia-scanner --skill offensive-fuzzing

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Fuzzing is a critical security testing technique; this Skill provides a practical, repeatable workflow to uncover vulnerabilities across software stacks by automating fuzz campaign design, harness creation, corpus management, mutation strategies, and crash triage.

Core Features & Use Cases

  • Fuzzer selection and configuration across AFL++, libFuzzer, Honggfuzz, Boofuzz, and syzkaller for GreyBox, WhiteBox, and ensemble strategies.
  • Harness writing, corpus curation, coverage measurement, and crash triage to drive efficient vulnerability discovery.
  • End-to-end fuzzing workflows applicable to file parsers, network protocols, kernel drivers, EDR engines, embedded firmware, and language runtimes.

Quick Start

Configure a target, select a fuzzer, write or adapt a harness, seed a corpus, and start fuzzing to uncover crashes.

Frequently Asked Questions about offensive-fuzzing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate fuzzing campaigns to uncover security vulnerabilities in file parsers and network protocols?▼

Offensive fuzzing applies to embedded firmware and kernel drivers by automating targeted harness creation, corpus management, and crash triage to reveal vulnerabilities across diverse software stacks using supported tools like syzkaller.

What's the best way to choose between AFL++, libFuzzer, and Honggfuzz for my fuzzing workflow?▼

Selecting between AFL++, libFuzzer, and Honggfuzz depends on applying GreyBox, WhiteBox, or ensemble fuzzing strategies to efficiently drive vulnerability discovery based on your specific target requirements.

Does offensive fuzzing support crash triage and coverage measurement for kernel drivers?▼

Yes, offensive fuzzing supports crash triage and coverage measurement for kernel drivers, satisfying requirements for reproducible workflows and efficient vulnerability discovery across targeted software stacks.

How do I write a harness and manage a corpus for fuzzing embedded firmware?▼

Harness writing and corpus curation for embedded firmware involve automating targeted harness creation, managing seed inputs, and measuring coverage to drive efficient vulnerability discovery during fuzzing campaigns.

Related Skills

Explore More Software Engineering Skills→
ayehiaaayehiaa

aflpp

Run AFL++ fuzzing campaigns to discover crashes and hangs in C/C++ programs.

Community
Intermediate
marcosd4hmarcosd4h
17

logic-vulnerability-detector

Detect logic vulnerabilities in DeepExtractIDA binaries and verify findings.

Community
Advanced
RedHatProductSecurityRedHatProductSecurity
47

coverage-analysis

Measure instrumented code coverage during fuzzing and generate reports.

Official
Intermediate
allanninalallanninal
1

libafl

Develop custom fuzzing engines with a modular Rust library.

Community
Advanced