Fuzzing
Named by 12 kept items in this workspace.
Search every workspace for Fuzzing. It matches the name as written, so it can find other things that share it.
The items that name it 12
novel fuzzers rewarded with bonus
Applied to firmware samples as part of bug finding; of 4,571 samples, only 1,580 (34.5%) could be successfully fuzzed (counting a sample successful if at least one existing tool can fuzz it), with average code coverage of only 10% and many false crashes/hangs
automated via a strict, author-developed workflow paired with an AI model to identify issues
Used to discover characters accepted in HTML tag names
OSS-Fuzz finds vulnerabilities with near-zero false positives, feeding CodeMender.
used as a discovery method within /goal runs, including building/using fuzzing harnesses
Used by Olympix, Firepan, SolidityGuard (Echidna, Medusa)
explicitly contrasted with Argo, which is not a fuzzer
coverage-guided harnessing and corpus-based bug discovery
/binary harness and /binary investigate --active launch fuzz campaigns when a concrete harness boundary exists
GPT-5.5-Cyber built a full fuzzing lab in under a day targeting a C library, including injecting operating system backpressure to reach previously unexplored buggy states
All techniques in this workspace.