Testing Handbook Skills

Comprehensive security testing toolkit generated from the Trail of Bits Application Security Testing Handbook.

When to Use

• Setting up fuzzing campaigns for C/C++, Rust, Python, or Ruby
• Writing fuzzing harnesses for target functions
• Analyzing code coverage to guide testing
• Running sanitizers (AddressSanitizer, UBSan, MSan) to catch memory bugs
• Performing constant-time testing for cryptographic code
• Using Wycheproof test vectors for crypto validation

When NOT to Use

• Smart contract auditing or chain-specific review work
• Writing custom static-analysis rules from scratch
• General code review outside a security-testing workflow
• Vulnerability hunting without a concrete testing plan