跳到主要内容
知仓学习社ZHICANG

Fuzzing Operations Skill

Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration

不碰外部(只输出文字)无严重或高危命中a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件,2 KB
它会碰到什么不碰外部(只输出文字)
命中总数0 处
命中统计严重 0 · 高 0 · 中 0 · 低 0

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Fuzzing Operations Skill

Overview

This skill provides comprehensive fuzzing capabilities for automated vulnerability discovery using industry-standard fuzzing frameworks.

Capabilities

  • Configure and launch AFL++ campaigns
  • Build instrumented binaries with coverage
  • Create and manage seed corpora
  • Triage and deduplicate crash files
  • Run afl-tmin and afl-cmin for minimization
  • Monitor fuzzing progress and coverage
  • Generate crash reproduction scripts
  • Support libFuzzer and honggfuzz

Target Processes

  • fuzzing-campaign.js
  • security-tool-development.js
  • vulnerability-research-workflow.js

Dependencies

  • AFL++ (afl-fuzz, afl-gcc, afl-clang-fast)
  • LLVM (for instrumentation)
  • Sanitizers (ASAN, MSAN, UBSAN)
  • libFuzzer (LLVM)
  • honggfuzz (optional)
  • Python for crash analysis scripts

Usage Context

This skill is essential for:

  • Automated vulnerability discovery
  • Coverage-guided fuzzing campaigns
  • Crash triage and root cause analysis
  • Harness development for fuzzing
  • Integration with CI/CD security testing

Integration Notes

  • Supports parallel fuzzing across multiple cores
  • Can integrate with corpus management systems
  • Generates reproducible crash test cases
  • Supports various target types (binaries, libraries, protocols)
  • Coverage reports in lcov/html format

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。