Agent-Skills.md

Agent Skills: Protocol Fuzzer Skill

Expert skill for protocol fuzzing, vulnerability discovery, and security testing

UncategorizedID: a5c-ai/babysitter/protocol-fuzzer

Repository

a5c-ai/babysitter
a5c-aiLicense: MIT
244

Install this agent skill to your local

pnpm dlx add-skill https://github.com/a5c-ai/babysitter/tree/HEAD/plugins/babysitter/skills/babysit/process/specializations/network-programming/skills/protocol-fuzzer

Skill Files

Browse the full folder contents for protocol-fuzzer.

Download Skill

Loading file tree…

plugins/babysitter/skills/babysit/process/specializations/network-programming/skills/protocol-fuzzer/SKILL.md

Skill Metadata

Name
protocol-fuzzer
Description
Expert skill for protocol fuzzing, vulnerability discovery, and security testing

Protocol Fuzzer Skill

Expert skill for protocol fuzzing, vulnerability discovery, and security testing of network protocols.

Capabilities

  • Fuzzer Configuration: Configure AFL++, libFuzzer, boofuzz, and Peach Fuzzer
  • Mutation Strategy Design: Generate effective mutation strategies for different protocols
  • Coverage Analysis: Analyze code coverage and crash reports
  • Grammar Definition: Create protocol grammar definitions for structured fuzzing
  • Vulnerability Detection: Detect crash patterns, memory corruption, and security vulnerabilities
  • Test Case Generation: Generate reproducible test cases from fuzzing results
  • Crash Triage: Analyze and deduplicate crash reports
  • Security Reporting: Generate security vulnerability reports

Tools and Dependencies

  • AFL++ - American Fuzzy Lop Plus Plus
  • libFuzzer - LLVM-based in-process fuzzer
  • boofuzz - Network protocol fuzzer (Sulley successor)
  • Peach Fuzzer - Smart fuzzing framework
  • radamsa - General-purpose fuzzer
  • honggfuzz - Security-oriented fuzzer

Target Processes

  • protocol-fuzzer.js
  • binary-protocol-parser.js
  • network-testing-framework.js

Usage Examples

Boofuzz Protocol Fuzzing

from boofuzz import *

session = Session(target=Target(connection=TCPSocketConnection("127.0.0.1", 8080)))
s_initialize("HTTP Request")
s_string("GET", fuzzable=False)
s_delim(" ", fuzzable=False)
s_string("/", name="path")
s_static("\r\n\r\n")
session.connect(s_get("HTTP Request"))
session.fuzz()

AFL++ Instrumented Fuzzing

afl-fuzz -i input_corpus -o findings -M main -- ./target @@
afl-cov -d findings --coverage-cmd "./target AFL_FILE" --code-dir src/

Crash Analysis

afl-analyze -i crash_file -- ./target @@

Quality Gates

  • Coverage threshold achieved
  • No critical vulnerabilities found
  • All crashes triaged
  • Reproducible test cases generated
  • Security report completed