offensive-fuzzing

Fuzzing harness creation for file parsers and network protocols requires selecting a fuzzer like AFL++ or libFuzzer and writing target-specific input handlers. This Skill provides structured guidance for building harnesses, curating seed corpora, and executing mutation strategies to identify vulnerabilities across multiple attack surfaces.

Crash triage is the end-stage process of analyzing fuzzer-generated crashes to determine exploitability and root cause. This Skill guides the complete triage workflow, helping you deduplicate crashes, identify unique vulnerabilities, and transition from raw crash artifacts to actionable security findings.

Yes, fuzzing kernel drivers and embedded firmware is fully supported alongside file parsers and network protocols. The Skill guides harness creation and corpus management for complex targets, applying fuzzers like syzkaller for kernel surfaces and Honggfuzz for embedded environments.

Supported fuzzers include AFL++, libFuzzer, Honggfuzz, Boofuzz, and syzkaller. The Skill helps you select the appropriate fuzzer type based on your target surface, whether you are testing network protocols with Boofuzz or kernel drivers with syzkaller.

To start a minimal fuzzing setup, select your target, choose a compatible fuzzer, and execute the compiled harness against a small seed corpus. This Skill structures the quick start workflow from initial target identification through to initial crash triage.

Fuzzing EDR engines and language runtimes demands specialized harness creation and targeted mutation strategies to discover deep vulnerabilities. This Skill provides an offensive security approach to structured fuzz campaigns, guiding corpus curation and fuzzer selection for these complex targets.