testing-handbook

What this skill does

Guides structured security testing across three pillars: Fuzzing (AFL++, libFuzzer, Honggfuzz), Sanitizers (ASan, MSan, UBSan, TSan), and Static Analysis (Semgrep, CodeQL, Clang Static Analyzer). Covers harness writing, corpus management, crash triage, sanitizer compilation flags, output interpretation, and mapping discovered vulnerabilities to MITRE ATT&CK techniques. Adapted from the Trail of Bits Testing Handbook methodology.

When to use

• Before shipping a parser, deserializer, network handler, or any code that processes untrusted input
• When auditing a C/C++ codebase for memory safety issues (buffer overflows, use-after-free, uninitialized reads)
• When a code review or SAST scan flags a high-risk function that needs empirical validation
• When setting up a continuous fuzzing pipeline (CI integration, corpus persistence)
• When triage is needed on a crash or sanitizer report of unknown severity

Prerequisites