What is Ruzzy and why use it with Claude Code?

Ruzzy is the only production-ready coverage-guided fuzzer for Ruby. Using it as a Claude Code skill allows the AI to help you write harnesses, configure sanitizers, and analyze crash reports to secure your Ruby applications.

Which platforms are supported by Ruzzy?

Ruzzy natively supports Linux x86-64 and AArch64. For developers on macOS or Windows, Ruzzy can be utilized through the provided Dockerfile or a Linux-based development environment.

What kind of bugs can Ruzzy detect in Ruby gems?

When integrated with sanitizers, Ruzzy can detect heap overflows, stack overflows, use-after-free, double-free, null pointer dereferences, and signed integer overflows in native code.

Can Ruzzy fuzz pure Ruby code without C extensions?

Yes, Ruzzy supports pure Ruby fuzzing by using a dual-script pattern: a tracer script that instruments the execution and a harness script that contains the target logic.

Ruzzy Ruby Fuzzer

Name: Ruzzy Ruby Fuzzer
Author: fjor1025

byfjor1025

0•

보안 및 테스팅

Performs coverage-guided fuzz testing on Ruby applications and C extensions to detect memory corruption and security vulnerabilities.

Ruzzy is a production-ready, coverage-guided fuzzer for the Ruby ecosystem built on top of libFuzzer. It provides a specialized framework for identifying memory safety issues, undefined behavior, and complex edge-case crashes in both pure Ruby code and native C extensions. By leveraging AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan), Ruzzy enables developers and security researchers to perform deep audits of Ruby gems and applications, ensuring high-performance libraries are resilient against malicious inputs and unexpected data patterns.

주요 기능

01Coverage-guided fuzzing for pure Ruby and native C extensions

02Compatible with standard libFuzzer options and corpus management

030 GitHub stars

04Support for Linux x86-64 and AArch64/ARM64 architectures

05Deep integration with AddressSanitizer (ASan) and UBSan

06Specialized tracer pattern for instrumenting the Ruby interpreter

사용 사례

01Security auditing of Ruby-based data parsers, decoders, and protocol implementations

02Testing Ruby C extensions for memory corruption issues like buffer overflows and use-after-free

03Hardening Ruby gems and libraries against crash-inducing edge cases before release

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework ruzzy

For use in Claude.ai and ChatGPT

Download Skill