santosomar/pt-fuzzing-binary-protocol
skills/pt-fuzzing-binary-protocol/SKILL.md
Performs authorized fuzz testing of binary formats and network protocols to uncover parser vulnerabilities, memory safety defects, and denial-of-service conditions. Use when assessing protocol handlers, file parsers, and service robustness against malformed inputs.
$ install --global
skillsauthnpx skillsauth add santosomar/ethical-hacking-agent-skills pt-fuzzing-binary-protocolInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 25, 2026, 6:18 PM61.4s1 file scanned
SKILL.md
- name:
- pt-fuzzing-binary-protocol
- description:
- Performs authorized fuzz testing of binary formats and network protocols to uncover parser vulnerabilities, memory safety defects, and denial-of-service conditions. Use when assessing protocol handlers, file parsers, and service robustness against malformed inputs.
Binary and Protocol Fuzzing
Authorized Use Only
Binary/protocol fuzzing can crash services and devices. Use only in approved environments with rollback and recovery plans. Never run uncontrolled campaigns against production systems.
Objectives
- Discover crash, hang, and memory-safety conditions.
- Validate robustness of protocol and file-format parsers.
- Deliver minimized proof cases and remediation priorities.
Workflow
- Prepare target and harness:
- Define target binary/service and exact version
- Build repeatable harness with deterministic input path
- Configure sanitizers/debug symbols where possible
- Seed and dictionary strategy:
- Collect representative valid corpus
- Add protocol/file dictionaries and boundary-value cases
- Run controlled fuzzing campaign:
- Configure time budgets, resource limits, and crash retention
- Monitor for crashes, hangs, OOM, and sanitizer signals
- Triage and minimize:
- Deduplicate by stack/signature
- Reduce to minimal reproducer inputs
- Confirm exploitability class and likely impact
- Remediation guidance:
- Parser hardening and defensive bounds checking
- Safer decoding patterns and dependency upgrades
- Regression harness for fixed cases
Output Template
# Binary/Protocol Fuzzing Output
## Campaign Setup
- Target and version:
- Harness:
- Sanitizers/instrumentation:
- Runtime limits:
## Crash and Hang Findings
- Finding ID:
- Trigger input:
- Signal/exception:
- Stack/signature:
- Reproduction steps:
- Impact classification:
- Suggested fix:
## Triage Summary
- Unique findings:
- Duplicates removed:
- Highest-risk classes:
## Regression Plan
- Repro corpus location:
- Required tests after patch:
Quality Checks
- Each finding has a minimized reproducer.
- Crash signatures are deduplicated and prioritized.
- Fix recommendations map to concrete parser hardening actions.
Related Skills
santosomar/pt-web-application-assessment
development
VerifiedTrustedCommunity
Performs authorized web application and API penetration testing with focus on OWASP-style risks and business logic flaws. Use when assessing websites, web APIs, authentication flows, session handling, and input validation.
12SKILL.mdUpdated Apr 25, 2026
santosomar/pt-scanning
testing
VerifiedTrustedCommunity
Performs authorized security scanning using static, dynamic, and vulnerability-focused methods. Use when mapping exposed services, profiling application behavior, and identifying known weaknesses for validation.
12SKILL.mdUpdated Apr 25, 2026
santosomar/pt-report-creation
testing
VerifiedTrustedCommunity
Creates penetration test deliverables for executive and technical audiences, including prioritized findings and remediation plans. Use when drafting, structuring, or finalizing pen test reports from collected evidence.
12SKILL.mdUpdated Apr 25, 2026
santosomar/pt-post-exploitation
testing
VerifiedTrustedCommunity
Performs authorized post-exploitation activities to assess impact, lateral movement paths, credential exposure, and detection gaps after initial compromise. Use when a foothold has been validated and the test requires controlled impact expansion analysis.
12SKILL.mdUpdated Apr 25, 2026