Fuzzing Ops

---
name: Fuzzing Operations Skill
description: Comprehensive fuzzing operations with AFL++, libFuzzer, and OSS-Fuzz integration
allowed-tools:
  - Bash
  - Read
  - Write
  - Edit
  - Glob
  - Grep
graph:
  domains: [domain:cybersecurity]
  specializations: [specialization:security-research]
  skillAreas: [skill-area:fuzz-testing, skill-area:vulnerability-scanning-remediation]
  roles: [role:security-engineer]
  workflows: [workflow:penetration-testing-cycle, workflow:vulnerability-management]
---

# Fuzzing Operations Skill

## Overview

This skill provides comprehensive fuzzing capabilities for automated vulnerability discovery using industry-standard fuzzing frameworks.

## Capabilities

- Configure and launch AFL++ campaigns
- Build instrumented binaries with coverage
- Create and manage seed corpora
- Triage and deduplicate crash files
- Run afl-tmin and afl-cmin for minimization
- Monitor fuzzing progress and coverage
- Generate crash reproduction scripts
- Support libFuzzer and honggfuzz

## Target Processes

- fuzzing-campaign.js
- security-tool-development.js
- vulnerability-research-workflow.js

## Dependencies

- AFL++ (afl-fuzz, afl-gcc, afl-clang-fast)
- LLVM (for instrumentation)
- Sanitizers (ASAN, MSAN, UBSAN)
- libFuzzer (LLVM)
- honggfuzz (optional)
- Python for crash analysis scripts

## Usage Context

This skill is essential for:
- Automated vulnerability discovery
- Coverage-guided fuzzing campaigns
- Crash triage and root cause analysis
- Harness development for fuzzing
- Integration with CI/CD security testing

## Integration Notes

- Supports parallel fuzzing across multiple cores
- Can integrate with corpus management systems
- Generates reproducible crash test cases
- Supports various target types (binaries, libraries, protocols)
- Coverage reports in lcov/html format