protocol-fuzzer

Solid

Expert skill for protocol fuzzing, vulnerability discovery, and security testing

AI & Automation 814 stars 53 forks Updated today MIT

Install

View on GitHub

Quality Score: 93/100

Stars 20%
97
Recency 20%
100
Frontmatter 20%
70
Documentation 15%
98
Issue Health 10%
50
License 10%
100
Description 5%
100

Skill Content

# Protocol Fuzzer Skill Expert skill for protocol fuzzing, vulnerability discovery, and security testing of network protocols. ## Capabilities - **Fuzzer Configuration**: Configure AFL++, libFuzzer, boofuzz, and Peach Fuzzer - **Mutation Strategy Design**: Generate effective mutation strategies for different protocols - **Coverage Analysis**: Analyze code coverage and crash reports - **Grammar Definition**: Create protocol grammar definitions for structured fuzzing - **Vulnerability Detection**: Detect crash patterns, memory corruption, and security vulnerabilities - **Test Case Generation**: Generate reproducible test cases from fuzzing results - **Crash Triage**: Analyze and deduplicate crash reports - **Security Reporting**: Generate security vulnerability reports ## Tools and Dependencies - `AFL++` - American Fuzzy Lop Plus Plus - `libFuzzer` - LLVM-based in-process fuzzer - `boofuzz` - Network protocol fuzzer (Sulley successor) - `Peach Fuzzer` - Smart fuzzing framework - `radamsa` - General-purpose fuzzer - `honggfuzz` - Security-oriented fuzzer ## Target Processes - protocol-fuzzer.js - binary-protocol-parser.js - network-testing-framework.js ## Usage Examples ### Boofuzz Protocol Fuzzing ```python from boofuzz import * session = Session(target=Target(connection=TCPSocketConnection("127.0.0.1", 8080))) s_initialize("HTTP Request") s_string("GET", fuzzable=False) s_delim(" ", fuzzable=False) s_string("/", name="path") s_static("\r\n\r\n") session.connect(s_get...

Details

Author
a5c-ai
Repository
a5c-ai/babysitter
Created
4 months ago
Last Updated
today
Language
JavaScript
License
MIT

Related Skills