Testing Handbook Skills
by @trailofbits · plugin · 15 skills
Skills from the Trail of Bits Application Security Testing Handbook (appsec.guide)
Install the whole plugin (CLI)
npx skillmds add trailofbits/aflpp
npx skillmds add trailofbits/ruzzy
npx skillmds add trailofbits/libafl
npx skillmds add trailofbits/atheris
npx skillmds add trailofbits/ossfuzz
npx skillmds add trailofbits/libfuzzer
npx skillmds add trailofbits/cargo-fuzz
npx skillmds add trailofbits/wycheproof
npx skillmds add trailofbits/harness-writing
npx skillmds add trailofbits/address-sanitizer
npx skillmds add trailofbits/coverage-analysis
npx skillmds add trailofbits/fuzzing-obstacles
npx skillmds add trailofbits/fuzzing-dictionary
npx skillmds add trailofbits/constant-time-testing
npx skillmds add trailofbits/testing-handbook-generatorSkills in this plugin
- ▌ aflpp · trailofbits bundleFuzz C/C++ projects with multi-core support using AFL++, a fork of AFL with better performance and advanced features.
- ▌ ruzzy · trailofbits bundleCoverage-guided fuzzing for Ruby code and C extensions using libFuzzer and sanitizers.
- ▌ libafl · trailofbits bundleBuild custom fuzzers with a modular Rust library, supporting advanced mutation strategies, custom feedback mechanisms, and non-standard target architectures.
- ▌ atheris · trailofbits bundleFuzz Python code and C extensions with coverage guidance and AddressSanitizer support using a libFuzzer-based fuzzer.
- ▌ ossfuzz · trailofbits bundleSet up continuous fuzzing infrastructure for open-source projects using Google's OSS-Fuzz platform, including building and running fuzz harnesses locally and enrolling new projects.
- ▌ libfuzzer · trailofbits bundleCoverage-guided fuzzer built into LLVM for C/C++ projects. Use for fuzzing C/C++ code that can be compiled with Clang.
- ▌ cargo-fuzz · trailofbits bundleFuzz Rust projects with libFuzzer using cargo-fuzz, including harness writing, sanitizer integration, and coverage analysis.
- ▌ wycheproof · trailofbits bundleValidate cryptographic implementations against known attacks and edge cases using Wycheproof test vectors.
- ▌ harness-writing · trailofbits bundleWrite effective fuzzing harnesses across languages to improve code coverage and find bugs in your system under test.
- ▌ address-sanitizer · trailofbits bundleDetect memory errors like buffer overflows and use-after-free bugs in C/C++ code during fuzzing and testing using AddressSanitizer.
- ▌ coverage-analysis · trailofbits bundleMeasures code coverage during fuzzing to assess harness effectiveness and identify fuzzing blockers.
- ▌ fuzzing-obstacles · trailofbits bundlePatch code to bypass checksums, global state, and validation checks that block fuzzer progress, using conditional compilation for C/C++ and Rust.
- ▌ fuzzing-dictionary · trailofbits bundleGuides fuzzers with domain-specific tokens to reach deeper code paths in parsers, protocol handlers, and file format processors.
- ▌ constant-time-testing · trailofbits bundleDetect timing side channels in cryptographic code using formal, symbolic, dynamic, and statistical testing tools.
- ▌ testing-handbook-generator · trailofbits bundleGenerates Claude Code skills from the Trail of Bits Testing Handbook for security testing tools and techniques.