There are a lot of interesting blog posts about writing custom fuzzers: https://h0mbre.github.io/ https://carstein.github.io/