I feel this checklist of shell-tools [0] is relevant, although the focus is more on how setuid is dangerous because you might not know the fancier arguments someone could supply.
> GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
gumby•29m ago
I thought the whole point of fuzzing was an example of finding data-only attacks.
segfaultbuserr•8m ago
A data-only attack would be an attack that reuses the original logic by only corrupting data inputs (such as a file path), without injecting code or changing logic.