Secure Fuzz Testing

English | Bahasa Indonesia

English

Description

Expert-level guidance for writing, running, and integrating coverage-guided fuzz tests (fuzzing) to identify security vulnerabilities, memory leaks, and input-validation issues in software applications. This skill covers writing fuzz targets in Python, Rust, and Go, configuring compilers with sanitizers (ASan, MSan, UBSan), and setting up automated CI/CD security pipelines.

Trigger Conditions

• Use when designing or reviewing data parsers, serialization/deserialization logic, or file formats.
• Use when writing libraries that process untrusted network input or binary data streams.
• Use when integrating automated security testing into a DevSecOps pipeline (CI/CD).
• Use when troubleshooting complex memory bugs, edge-case crashes, or unhandled exceptions.