WuppieFuzz lab files from "12,165 Crashes in 60 Seconds" (blog.shellnetsecurity.com)
Everything runs in Docker. Tested on Docker Desktop for Mac (Apple silicon, 8 GB VM).

1. git clone https://github.com/TNO-S3/WuppieFuzz.git
   docker build -f Dockerfile.wuppiefuzz -t wuppiefuzz:local WuppieFuzz   (8-10 min)
2. docker build -t wf-target:lab target
   docker build -t wf-fanout:lab fanout
   docker network create wf-net
3. ./run.sh blackbox 60                       black-box, original spec
   ./campaign.sh                              grey-box run with the coverage agent, corrected spec
   ./lcov-report.sh runs/<run>/reports/<ts>   HTML coverage report (the fuzzer image lacks lcov)
   ./q.sh runs/<run> <<< "SELECT ...;"        query a run's report.db
   cd fanout && ./fanout.sh agent-on-front front

auth-wfc.yaml holds a FAKE token on purpose; the post shows where it ends up.
Run long campaigns under `caffeinate -i` on a Mac so it can't idle-sleep mid-run.