Skill UI

AddressSanitizer accelerates fuzz testing by instrumenting C/C++ and unsafe Rust code to detect buffer overflows, use-after-free, and related memory corruption bugs at runtime, with configurable ASAN_OPTIONS for verbosity, abort behavior, and leak control.

Atheris is a coverage-guided Python fuzzer built on libFuzzer for fuzzing pure Python code and C extensions, with AddressSanitizer support to catch memory corruption and an easy harness setup for command-line fuzz runs.

Atheris is a coverage-guided Python fuzzer built on libFuzzer for fuzzing pure Python code and C extensions, with AddressSanitizer support to catch memory corruption and an easy harness setup for command-line fuzz runs.

This guide details how to implement coverage-guided fuzz testing using AFL++ within CI/CD pipelines. It covers building the fuzzing harness, utilizing advanced instrumentation (like AddressSanitizer), and configuring automated runs to discover memory corruption and input handling vulnerabilities in compiled applications. Ideal for strengthening DevSecOps practices and ensuring code reliability.

This advanced technique utilizes AFL++, a powerful fork of American Fuzzy Lop, to perform coverage-guided fuzzing on compiled binaries. It instruments targets and systematically mutates input data to explore deep, previously unreached code paths. Ideal for comprehensive security assessments, vulnerability discovery, and rigorous binary compatibility testing, it helps uncover crashes, memory corruption bugs, and security flaws.

An advanced debugging skill designed for AI agents. It utilizes gdb-cli to provide intelligent assistance for C/C++ programs, enabling the analysis of core dumps, debugging live processes, and investigating complex issues like crashes, deadlocks, and memory corruption. It correlates runtime state inspection with source code context for deeper insights.

This comprehensive guide covers advanced fuzzing methodology, a core technique in exploit development. Learn how to use coverage-guided fuzzing with powerful tools like AFL++ and libFuzzer to automatically discover critical security vulnerabilities, such as memory corruption bugs. Ideal for setting up robust fuzz campaigns, optimizing corpus generation, and triaging complex vulnerability outputs.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.

Diagnoses full-stack failure modes in agent and LLM applications, including wrapper regressions, memory contamination, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings and code-first fixes for production agent systems.

Diagnoses full-stack failure modes in agent and LLM applications, including wrapper regressions, memory contamination, tool discipline failures, hidden repair loops, and rendering corruption. Produces severity-ranked findings and code-first fixes for production agent systems.