A collection of practical fuzzing notes, workflows, and references based on personal experience in vulnerability research and software testing.
This repository contains documentation and resources covering various aspects of fuzzing, including setup, tooling, crash analysis, and vulnerability triage. The goal is to provide a concise reference for learning and applying fuzzing techniques in real-world scenarios.
- SKILL.md — Core fuzzing concepts, methodology, and notes.
- fuzzing-toolchain.md — Toolchain setup and configuration guidance.
- crash-triage.md — Crash analysis and triage workflow documentation.
- test-vuln/ — Sample vulnerable programs and testing material.
- Coverage-guided fuzzing
- Fuzzing harness development
- Corpus generation and minimization
- Sanitizer integration (ASan, UBSan, MSan)
- Crash triage and deduplication
- Root cause analysis
- Vulnerability validation
- Fuzzing automation
This repository serves as a personal knowledge base and learning resource for fuzzing, vulnerability discovery, and software security research.
All content is provided for educational, research, and defensive security purposes only. Always obtain proper authorization before testing software or systems that you do not own.
No license has been specified yet.