Fuzzing Menu-Based CTF Challenges with AFL++
Menu-driven heap challenges are stateful, so a raw byte fuzzer bounces off them. This guide builds a vulnerable heap note manager, then writes a structure-aware AFL++ harness that turns the fuzzer's bytes into menu operations and finds the bug for you.