Which programming languages are supported?

This skill provides specific implementation guidance and code patterns for C, C++, and Rust, covering major fuzzers like libFuzzer and AFL++.

What is a fuzzing obstacle?

A fuzzing obstacle is any code pattern, such as a checksum verification or a random seed, that prevents a fuzzer from exploring deeper logic or consistently reproducing found crashes.

Does this skill modify my production code?

No, these techniques use conditional compilation to ensure that patches are only active during specialized fuzzing builds while leaving production code unchanged.

Why use patches instead of a fuzzer dictionary?

While dictionaries help with magic bytes, obstacles like complex hashes or time-based logic are statistically impossible for a fuzzer to 'guess' through input alone.

How do I know if my patch is effective?

You should use coverage analysis tools like llvm-cov or cargo-cov to compare line and function coverage before and after applying the patch to confirm deeper code exploration.

Fuzzing Obstacle Bypass

Name: Fuzzing Obstacle Bypass
Author: fjor1025

byfjor1025

0•

보안 및 테스팅

Bypasses anti-fuzzing patterns like checksums and non-deterministic logic using conditional compilation to improve code coverage during security testing.

This skill provides standardized techniques and implementation patterns for patching software to make it more amenable to automated fuzzing. By leveraging conditional compilation flags such as FUZZING_BUILD_MODE_UNSAFE_FOR_PRODUCTION in C++ or cfg!(fuzzing) in Rust, it allows developers to skip computationally expensive or statistically impossible barriers like cryptographic signatures, fixed PRNG seeds, and complex input validation. This approach ensures that security tools can reach deep code paths without compromising the integrity of production builds, making it an essential utility for vulnerability research and robust software testing.

주요 기능

01Techniques for bypassing checksum and hash verification

02Conditional compilation patterns for C, C++, and Rust

03PRNG determinism for reproducible crash scenarios

04Measurement strategies for quantifying coverage improvements

05Safe validation skipping using defensive default values

060 GitHub stars

사용 사례

01Bypassing cryptographic signatures to test message parsing logic

02Increasing code coverage in legacy systems with rigid input validation

03Enforcing deterministic behavior in applications relying on system time

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework fuzzing-obstacles

For use in Claude.ai and ChatGPT

Download Skill