What is a fuzzing harness?

A fuzzing harness is an entrypoint function that accepts random data from a fuzzer and feeds it into the system under test to discover edge-case bugs.

Why is determinism important in fuzzing?

Determinism ensures that the same input always produces the same program behavior, which is essential for reproducing and fixing the crashes found by the fuzzer.

How does FuzzedDataProvider help?

It simplifies extracting typed data, such as integers or strings, from raw byte streams, making it easier to test APIs that require complex parameters.

Which languages does this skill support?

This skill provides patterns and best practices for C, C++, and Rust, including specific tools like libFuzzer and the Rust 'arbitrary' crate.

Fuzzing Harness Writing

Name: Fuzzing Harness Writing
Author: micsapp

bymicsapp

0•

Security & Testing

Generates high-quality fuzzing harnesses to identify edge-case bugs and security vulnerabilities across multiple programming languages.

This skill provides comprehensive guidance on creating effective fuzzing harnesses, serving as the critical bridge between random fuzzer inputs and your application's API. It offers implementation patterns for C, C++, and Rust, emphasizing techniques like structured input extraction with FuzzedDataProvider, maintaining determinism, and implementing structure-aware fuzzing. By applying these best practices, developers can significantly improve code coverage, ensure crash reproducibility, and uncover deep-seated vulnerabilities that traditional unit testing might miss.

Key Features

01Structure-aware fuzzing with Arbitrary and Protocol Buffers

02Patterns for deterministic fuzzing and reproducible crashes

030 GitHub stars

04Cross-language support for C, C++, and Rust fuzzing

05Interleaved fuzzing techniques for complex API testing

06Structured data extraction using FuzzedDataProvider

Use Cases

01Debugging and fixing non-reproducible crashes found during automated testing

02Improving low code coverage in existing fuzzing campaigns

03Creating a new fuzz target for a security-critical protocol parser

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills harness-writing

For use in Claude.ai and ChatGPT

Key Features

01Structure-aware fuzzing with Arbitrary and Protocol Buffers

02Patterns for deterministic fuzzing and reproducible crashes

030 GitHub stars

04Cross-language support for C, C++, and Rust fuzzing

05Interleaved fuzzing techniques for complex API testing

06Structured data extraction using FuzzedDataProvider

Use Cases

01Debugging and fixing non-reproducible crashes found during automated testing

02Improving low code coverage in existing fuzzing campaigns

03Creating a new fuzz target for a security-critical protocol parser

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills harness-writing

For use in Claude.ai and ChatGPT