aflpp

Run multi-core AFL++ fuzzing campaigns for C/C++ projects with sanitizers.

Updated Jan 30, 2026
One-click install
npx skills add https://github.com/andrescardonas7/salchipapa-web --skill aflpp-andrescardonas7
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aflpp
Source: https://github.com/andrescardonas7/salchipapa-web/tree/main/.cursor/skills/testing-handbook-skills/aflpp
Command: npx skills add https://github.com/andrescardonas7/salchipapa-web --skill aflpp-andrescardonas7

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill addresses the need for efficient and scalable vulnerability discovery in C/C++ projects by leveraging advanced multi-core fuzzing techniques.

Core Features & Use Cases

  • Multi-core Fuzzing: Significantly increases fuzzing throughput by utilizing multiple CPU cores.
  • Advanced Mutation Strategies: Employs sophisticated mutation techniques for deeper code coverage.
  • Sanitizer Integration: Seamlessly integrates with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) for robust bug detection.
  • Use Case: Secure a critical C library by running an intensive, multi-core fuzzing campaign to uncover memory corruption vulnerabilities before they can be exploited.

Quick Start

Use the aflpp skill to fuzz the provided C++ program 'harness.cc' with initial seeds from the 'seeds' directory, saving results to 'out'.

Frequently Asked Questions about aflpp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run multi-core fuzzing for a C++ project to find memory corruption vulnerabilities?

Multi-core fuzzing for a C++ project utilizes parallel execution to significantly increase throughput, enabling efficient vulnerability discovery and uncovering memory corruption issues before exploitation.

Can I integrate AddressSanitizer and UndefinedBehaviorSanitizer with fuzzing campaigns?

Yes, fuzzing campaigns can seamlessly integrate with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) to provide robust bug detection and identify memory errors during vulnerability discovery.

How do I write a fuzzing harness and manage input corpora for C++ security testing?

Writing a fuzzing harness and managing input corpora are supported steps in the fuzzing workflow, allowing you to supply initial seeds, execute mutations, and analyze campaign results for optimal security testing.

What is the best way to increase code coverage during C/C++ fuzzing?

The best way to increase code coverage during C/C++ fuzzing is to employ advanced mutation strategies, which use sophisticated techniques to explore deeper code paths and discover vulnerabilities efficiently.

Does multi-core fuzzing work with existing AFL++ setups for C and C++ projects?

Yes, multi-core fuzzing works with AFL++ setups by leveraging multiple CPU cores to scale vulnerability discovery in C and C++ projects, running intensive campaigns to secure critical libraries.