LibFuzzer
Skill Verified ActiveCoverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.
To guide developers in quickly setting up and effectively using libFuzzer for fuzzing C/C++ code, enabling them to find bugs and improve code security.
Features
- Coverage-guided fuzzing with libFuzzer
- Detailed harness writing guidance
- Compilation instructions with sanitizers
- Corpus management and optimization strategies
- Running fuzzing campaigns and interpreting results
Use Cases
- When needing to set up fuzzing for a C/C++ project compiled with Clang.
- When wanting a simple, integrated fuzzing solution for quick setup.
- When transitioning from libFuzzer to more advanced fuzzers.
- When aiming to find memory errors and undefined behavior in C/C++ code.
Non-Goals
- Providing alternative fuzzers like AFL++ or LibAFL as the primary solution.
- Fuzzing code not compatible with Clang.
- Guiding advanced custom fuzzer development beyond standard libFuzzer usage.
Workflow
- Understand libFuzzer's purpose and when to use it.
- Install prerequisites (LLVM/Clang).
- Write a fuzzing harness (LLVMFuzzerTestOneInput).
- Compile the target code with fuzzing instrumentation.
- Manage the corpus (initial seeds, minimization).
- Run fuzzing campaigns and interpret results/crashes.
Prerequisites
- LLVM/Clang compiler
- Optional: LLVM tools for coverage analysis
Installation
First, add the marketplace
/plugin marketplace add trailofbits/skills/plugin install testing-handbook-skills@trailofbitsQuality Score
VerifiedTrust Signals
Similar Extensions
Senior Backend Engineer
100Designs and implements backend systems including REST APIs, microservices, database architectures, authentication flows, and security hardening. Use when the user asks to "design REST APIs", "optimize database queries", "implement authentication", "build microservices", "review backend code", "set up GraphQL", "handle database migrations", or "load test APIs". Covers Node.js/Express/Fastify development, PostgreSQL optimization, API security, and backend architecture patterns.
AFL++ Fuzzer
95AFL++ is a fork of AFL with better fuzzing performance and advanced features. Use for multi-core fuzzing of C/C++ projects.
AddressSanitizer
85AddressSanitizer detects memory errors during fuzzing. Use when fuzzing C/C++ code to find buffer overflows and use-after-free bugs.
Libafl
79LibAFL is a modular fuzzing library for building custom fuzzers. Use for advanced fuzzing needs, custom mutators, or non-standard fuzzing targets.
Secrets Management
100Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
Semgrep Rule Creator
100Creates custom Semgrep rules for detecting security vulnerabilities, bug patterns, and code patterns. Use when writing Semgrep rules or building custom static analysis detections.