aflpp

Fuzz C/C++ projects with AFL++ using multi-core execution and sanitizers.

Updated Feb 13, 2026
One-click install
npx skills add https://github.com/fjor1025/InfoSec-Framework --skill aflpp-fjor1025
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aflpp
Source: https://github.com/fjor1025/InfoSec-Framework/tree/main/ClaudeSkills/plugins/testing-handbook-skills/skills/aflpp
Command: npx skills add https://github.com/fjor1025/InfoSec-Framework --skill aflpp-fjor1025

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the process of fuzz testing C/C++ projects, enabling faster discovery of bugs and vulnerabilities through advanced, multi-core fuzzing techniques.

Core Features & Use Cases

  • Multi-core Fuzzing: Leverages multiple CPU cores for significantly increased fuzzing throughput.
  • Advanced Mutation Strategies: Employs sophisticated mutation techniques to explore diverse code paths.
  • Sanitizer Integration: Seamlessly integrates with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) for deeper bug detection.
  • Use Case: You are auditing a complex C library and need to find memory corruption bugs. Use this Skill to set up a distributed fuzzing campaign across multiple cores, with ASan enabled, to maximize bug discovery potential.

Quick Start

Use the aflpp skill to fuzz the provided C++ harness file 'harness.cc' and 'main.cc' using Docker.

Frequently Asked Questions about aflpp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up multi-core fuzzing for a C++ project to find memory corruption bugs?

Multi-core fuzzing for C++ projects is facilitated by leveraging multiple CPU cores to increase throughput, enabling faster discovery of memory corruption bugs through advanced mutation strategies and distributed execution.

Can I integrate AddressSanitizer and UndefinedBehaviorSanitizer when fuzzing C code?

Yes, you can integrate AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) when fuzzing C code to achieve deeper bug detection and identify memory errors alongside undefined behavior during the fuzzing campaign.

What compilation modes are supported for fuzzing C and C++ applications?

Supported compilation modes for fuzzing C and C++ applications include LTO, LLVM, and GCC plugins, allowing flexible instrumentation to maximize code path exploration and mutation effectiveness.

What is the best way to manage a fuzzing corpus and analyze results?

The best way to manage a fuzzing corpus and analyze results is by using provided guidance on corpus management and result analysis, ensuring you effectively track diverse code paths and identified vulnerabilities.

How do I write a fuzzing harness for a C library using Docker?

Writing a fuzzing harness for a C library using Docker involves utilizing provided guidance on harness writing to create input-consuming target functions, then executing the fuzzing campaign within the containerized environment.