aflpp

Launch AFL++ fuzzing campaigns against a compiled harness to uncover memory-safety and logic bugs.

9|4|Updated Feb 7, 2026
One-click install
npx skills add https://github.com/marduk191/qwen3_mcp --skill aflpp-marduk191
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: aflpp
Source: https://github.com/marduk191/qwen3_mcp/tree/main/skills/testing-handbook-skills/skills/aflpp
Command: npx skills add https://github.com/marduk191/qwen3_mcp --skill aflpp-marduk191

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

AFL++ provides high-performance fuzzing capabilities to test and harden C/C++ projects by finding memory and logic bugs using multi-core parallelism and advanced mutation strategies.

Core Features & Use Cases

  • Multi-core fuzzing for throughput and stability.
  • Rich tooling and corpus management, sanitizers, and complex mutation strategies.
  • Real-world use: fuzz a C/C++ project to discover crashes and security bugs, integrate with CI.

Quick Start

To begin fuzzing, install AFL++ and run the fuzzer against your target harness.

Frequently Asked Questions about aflpp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I fuzz a C/C++ project using AFL++ for memory-safety bugs?

To fuzz a C/C++ project, you launch AFL++ fuzzing campaigns against a compiled harness. This process uses multi-core parallelism and complex mutation strategies to uncover memory-safety bugs and crashes.

Can I run multi-core parallel fuzzing workflows with AFL++?

Yes, AFL++ is designed for multi-core environments to execute parallel fuzzing workflows. This capability significantly increases throughput and stability when testing large C/C++ projects.

Does AFL++ support sanitizers and robust corpus management?

AFL++ supports sanitizers and robust corpus management for C/C++ projects. These features work together to detect memory violations and maintain effective fuzzing inputs throughout the campaign.

What is the best way to find logic bugs in a large C/C++ codebase?

The best way to find logic bugs is using AFL++ fuzzing with deterministic mutation options. It applies advanced mutation strategies against a compiled harness to expose unexpected program states.

How do I integrate AFL++ fuzzing into a continuous integration pipeline?

You integrate AFL++ into CI by launching fuzzing campaigns against a compiled harness within your build system. This automates crash detection and security bug discovery for C/C++ projects on every commit.