Skill UI

AddressSanitizer accelerates fuzz testing by instrumenting C/C++ and unsafe Rust code to detect buffer overflows, use-after-free, and related memory corruption bugs at runtime, with configurable ASAN_OPTIONS for verbosity, abort behavior, and leak control.

Atheris is a coverage-guided Python fuzzer built on libFuzzer for fuzzing pure Python code and C extensions, with AddressSanitizer support to catch memory corruption and an easy harness setup for command-line fuzz runs.

Atheris is a coverage-guided Python fuzzer built on libFuzzer for fuzzing pure Python code and C extensions, with AddressSanitizer support to catch memory corruption and an easy harness setup for command-line fuzz runs.

This guide details how to implement coverage-guided fuzz testing using AFL++ within CI/CD pipelines. It covers building the fuzzing harness, utilizing advanced instrumentation (like AddressSanitizer), and configuring automated runs to discover memory corruption and input handling vulnerabilities in compiled applications. Ideal for strengthening DevSecOps practices and ensuring code reliability.

This skill provides a comprehensive guide to implementing advanced memory protection mechanisms on Windows endpoints. It covers critical techniques like Data Execution Prevention (DEP), Address Space Layout Randomization (ASLR), and Control Flow Guard (CFG). Use this when hardening systems against various memory corruption exploits, such as buffer overflows and ROP chains, to significantly boost overall security posture.

A comprehensive toolkit for analyzing ELF binaries to locate memory-corruption vulnerabilities, such as buffer overflows and ROP chains. This skill is vital for authorized penetration testing and CTF challenges, allowing users to evaluate compiler mitigations (ASLR, NX, Canary, PIE) and develop robust proof-of-concept exploits.

This advanced technique utilizes AFL++, a powerful fork of American Fuzzy Lop, to perform coverage-guided fuzzing on compiled binaries. It instruments targets and systematically mutates input data to explore deep, previously unreached code paths. Ideal for comprehensive security assessments, vulnerability discovery, and rigorous binary compatibility testing, it helps uncover crashes, memory corruption bugs, and security flaws.

A comprehensive tool designed for assessing the security posture of Programmable Logic Controller (PLC) firmware. It specializes in detecting critical vulnerabilities such as hardcoded credentials, undocumented debug interfaces, backdoor functions, and memory corruption flaws. The tool supports analyzing major industrial platforms (Siemens, Allen-Bradley) by performing static and dynamic analysis, and verifying firmware integrity against known-good baselines, adhering to standards like IEC 62443. Use only in authorized lab environments.

An advanced debugging skill designed for AI agents. It utilizes gdb-cli to provide intelligent assistance for C/C++ programs, enabling the analysis of core dumps, debugging live processes, and investigating complex issues like crashes, deadlocks, and memory corruption. It correlates runtime state inspection with source code context for deeper insights.

This comprehensive guide covers advanced fuzzing methodology, a core technique in exploit development. Learn how to use coverage-guided fuzzing with powerful tools like AFL++ and libFuzzer to automatically discover critical security vulnerabilities, such as memory corruption bugs. Ideal for setting up robust fuzz campaigns, optimizing corpus generation, and triaging complex vulnerability outputs.

A deep-dive curriculum into core memory corruption vulnerability classes, covering topics like stack/heap buffer overflows, Use-After-Free (UAF), integer overflows, and format strings. This guide uses real-world CVE case studies (e.g., QNAP, Chrome) to illustrate attack vectors, impact analysis, and modern mitigation techniques. Ideal for cybersecurity professionals, penetration testers, and students learning exploit development.

A comprehensive playbook detailing advanced techniques for exploiting glibc heap vulnerabilities using ptmalloc2. Covers various memory corruption primitives, including Use-After-Free, double free, and overflows. Provides version-specific guidance on bypassing modern protections like safe-linking (glibc >= 2.32) and RCE methods for post-2.34 environments.