# Pt Fuzzing Binary Protocol

> Performs authorized fuzz testing of binary formats and network protocols to uncover parser vulnerabilities, memory safety defects, and denial-of-service conditions. Use when assessing protocol handlers, file parsers, and service robustness against malformed inputs.

- **Type:** Skill
- **Install:** `agentstack add skill-santosomar-ethical-hacking-agent-skills-pt-fuzzing-binary-protocol`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [santosomar](https://agentstack.voostack.com/s/santosomar)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [santosomar](https://github.com/santosomar)
- **Source:** https://github.com/santosomar/ethical-hacking-agent-skills/tree/main/skills/pt-fuzzing-binary-protocol

## Install

```sh
agentstack add skill-santosomar-ethical-hacking-agent-skills-pt-fuzzing-binary-protocol
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Binary and Protocol Fuzzing

## Authorized Use Only

Binary/protocol fuzzing can crash services and devices. Use only in approved environments with rollback and recovery plans. Never run uncontrolled campaigns against production systems.

## Objectives

1. Discover crash, hang, and memory-safety conditions.
2. Validate robustness of protocol and file-format parsers.
3. Deliver minimized proof cases and remediation priorities.

## Workflow

1. Prepare target and harness:
   - Define target binary/service and exact version
   - Build repeatable harness with deterministic input path
   - Configure sanitizers/debug symbols where possible
2. Seed and dictionary strategy:
   - Collect representative valid corpus
   - Add protocol/file dictionaries and boundary-value cases
3. Run controlled fuzzing campaign:
   - Configure time budgets, resource limits, and crash retention
   - Monitor for crashes, hangs, OOM, and sanitizer signals
4. Triage and minimize:
   - Deduplicate by stack/signature
   - Reduce to minimal reproducer inputs
   - Confirm exploitability class and likely impact
5. Remediation guidance:
   - Parser hardening and defensive bounds checking
   - Safer decoding patterns and dependency upgrades
   - Regression harness for fixed cases

## Output Template

```markdown
# Binary/Protocol Fuzzing Output

## Campaign Setup
- Target and version:
- Harness:
- Sanitizers/instrumentation:
- Runtime limits:

## Crash and Hang Findings
- Finding ID:
  - Trigger input:
  - Signal/exception:
  - Stack/signature:
  - Reproduction steps:
  - Impact classification:
  - Suggested fix:

## Triage Summary
- Unique findings:
- Duplicates removed:
- Highest-risk classes:

## Regression Plan
- Repro corpus location:
- Required tests after patch:
```

## Quality Checks

- Each finding has a minimized reproducer.
- Crash signatures are deduplicated and prioritized.
- Fix recommendations map to concrete parser hardening actions.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [santosomar](https://github.com/santosomar)
- **Source:** [santosomar/ethical-hacking-agent-skills](https://github.com/santosomar/ethical-hacking-agent-skills)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-santosomar-ethical-hacking-agent-skills-pt-fuzzing-binary-protocol
- Seller: https://agentstack.voostack.com/s/santosomar
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.