dsh-fuzz: Differential fuzzing and logic testing on top of diffprobe

dsh-fuzz is a DeepSeek Harness plugin by maintainer rannyrjjy (workflow classification, 1 GitHub star). It is based on the diffprobe package engine and registers only one fuzz Host tool. It automates the two most resource-intensive steps in interface privilege escalation and logical vulnerability verification: "constructing comparative requests" and "judging response differences." The workflow consists of sampling -> planning -> execution -> judgment, defaulting to read-only mode. The plugin provides six actions: harvest, plan, run, verdict, doctor, and bizmap. It supports plan types such as IDOR, chain, massassign, and bypass, as well as classic payload sets like SQLi, XSS, and SSRF. The verdict distinguishes between DIFFERENTIAL, BLOCKED, INVALID, STATE_CHANGED, and NO_SIGNAL, and differentiates between two types of differences: state-or-data and error-channel. The plugin requires Node.js 22.19+ and Python 3.9+, supports both GitHub and local "file:" installation methods, and saves all evidence and raw request/response data to disk without entering a conversation. It is intended solely for authorized penetration testing, CTF targets, and assessment of own systems.