aflpp

Automate multi-core fuzzing of C/C++ codebases with AFL++ and sanitizers.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/amano--/call-center --skill aflpp-amano
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aflpp
Source: https://github.com/amano--/call-center/tree/main/.gemini/antigravity/skills/trailofbits-security/aflpp
Command: npx skills add https://github.com/amano--/call-center --skill aflpp-amano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of finding vulnerabilities in C/C++ codebases by automating the process of discovering bugs through advanced fuzzing techniques.

Core Features & Use Cases

  • Multi-core Fuzzing: Leverages multiple CPU cores to significantly increase fuzzing throughput and speed up vulnerability discovery.
  • Diverse Mutation Strategies: Employs a wide range of mutation techniques to explore more code paths and uncover complex bugs.
  • Sanitizer Integration: Seamlessly integrates with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) to detect memory corruption and undefined behavior bugs.
  • Use Case: You have a critical C library that processes network protocols. Use this Skill to run an intensive, multi-core fuzzing campaign to uncover potential buffer overflows or use-after-free vulnerabilities before they can be exploited.

Quick Start

Use the aflpp skill to fuzz the provided C++ program 'my_program.cc' with a basic harness.

Frequently Asked Questions about aflpp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find vulnerabilities in C++ code using fuzzing?

You can find vulnerabilities in C++ code by running an automated multi-core fuzzing campaign with AFL++, which applies diverse mutation strategies to rapidly discover complex bugs.

Does AFL++ integrate with AddressSanitizer for memory corruption detection?

Yes, AFL++ integrates seamlessly with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) to detect memory corruption and undefined behavior during C/C++ fuzzing campaigns.

How do I set up a multi-core fuzzing campaign for C/C++ codebases?

Multi-core fuzzing campaigns for C/C++ codebases leverage multiple CPU cores to significantly increase fuzzing throughput, requiring a basic harness and corpus management to accelerate vulnerability discovery.

What is the best way to fuzz a C library that processes network protocols?

The best way to fuzz a C network protocol library is running an intensive multi-core AFL++ campaign to uncover potential buffer overflows or use-after-free vulnerabilities before deployment.

Can I automate harness writing and corpus management for vulnerability research?

Yes, this approach automates vulnerability research by providing dedicated tools for harness writing, corpus management, and result analysis to streamline the discovery of bugs in complex C/C++ projects.