What is the primary purpose of a fuzzing harness?

A fuzzing harness acts as the bridge between a fuzzer's random byte generation and your application's API, routing data to the system under test to find crashes and vulnerabilities.

Why is FuzzedDataProvider recommended in the harness?

FuzzedDataProvider simplifies the process of extracting typed data like integers and strings from a raw byte stream, which is essential for testing APIs that require structured input.

Can this skill help fix non-reproducible fuzzing crashes?

Yes, it includes techniques for ensuring determinism, such as resetting global state and replacing non-deterministic seeds with fuzzer-provided values.

How does this skill help with Rust development?

It provides specific patterns for the cargo-fuzz ecosystem, including the use of the Arbitrary crate to automatically map raw bytes to complex Rust structs.

Fuzzing Harness Expert

Name: Fuzzing Harness Expert
Author: monmacllcapp

bymonmacllcapp

0•

セキュリティとテスト

Provides structured techniques and code patterns for writing effective fuzzing harnesses to improve software security and reliability.

The Fuzzing Harness Expert skill provides specialized guidance for creating robust entry points for fuzz testing across multiple languages like C++ and Rust. It helps developers bridge the gap between random fuzzer input and complex application APIs by offering patterns for input validation, structured data extraction with FuzzedDataProvider, and deterministic testing. Use this skill to increase code coverage, identify deep-seated security vulnerabilities, and ensure that discovered crashes are consistently reproducible.

主な機能

01Structured data extraction patterns using FuzzedDataProvider and the Arbitrary crate

02Strategies for resetting global state and mocking I/O to prevent side effects

03Best practices for ensuring determinism and handling non-deterministic system calls

040 GitHub stars

05Language-specific harness templates for C, C++, and Rust (libFuzzer/cargo-fuzz)

06Implementation guides for interleaved fuzzing to test multiple related operations

ユースケース

01Hardening security-critical APIs by automating edge-case discovery through random input

02Improving the efficiency of existing fuzzing campaigns with low code coverage

03Building a new fuzz target for complex file format or network protocol parsers

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add monmacllcapp/skill-forks harness-writing

For use in Claude.ai and ChatGPT

Download Skill