performing-fuzzing-with-aflplusplus

Automate coverage-guided fuzzing of compiled binaries with AFL++.

2|Updated Apr 14, 2026

Search Tags:#fuzzing #security-testing #binary #aflplusplus #crash-triage

Ready to run

npx skills add https://github.com/Acczdy/MoZiSec --skill performing-fuzzing-with-aflplusplus

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: performing-fuzzing-with-aflplusplus
Source: https://github.com/Acczdy/MoZiSec/tree/main/web-security/.claude/skills/performing-fuzzing-with-aflplusplus
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill performing-fuzzing-with-aflplusplus

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Fuzzing is essential to identify memory corruption and crashes in compiled binaries before release. AFL++ based coverage-guided fuzzing provides automated discovery of crashes and memory issues, enabling faster remediation.

Core Features & Use Cases

Instrumentation-based fuzzing: instruments binaries with afl-cc/afl-clang-fast and runs high-throughput fuzz campaigns.
Corpus management & triage: uses afl-cmin/afl-tmin to minimize inputs and CASR/GDB for crash triage.
Parallel campaigns & analysis: supports parallel fuzzing with afl-fuzz and reports findings for security testing.

Quick Start

Provide a target binary and seed corpus to start a coverage-guided fuzzing campaign with AFL++.

Frequently Asked Questions about performing-fuzzing-with-aflplusplus

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate fuzzing for compiled binaries to find memory corruption?▼

Automate fuzzing for compiled binaries by instrumenting targets with afl-cc or afl-clang-fast and running coverage-guided fuzz campaigns with afl-fuzz to uncover memory corruption and crashes.

What is the best way to minimize a seed corpus during binary security testing?▼

Minimize a seed corpus during binary security testing by applying afl-cmin for corpus minimization and afl-tmin for crash minimization, ensuring efficient coverage-guided fuzzing campaigns.

Can I run parallel fuzzing campaigns with AFL++ for regression testing?▼

Yes, you can run parallel fuzzing campaigns with AFL++ for regression testing by utilizing the parallel fuzzing capabilities of afl-fuzz to increase throughput and discover crashes faster.

How does crash triage work when fuzzing uncovers memory issues?▼

Crash triage works when fuzzing uncovers memory issues by utilizing CASR or GDB to analyze the generated crash files, isolating the root cause of the memory corruption for incident response.

Do I need to provide a seed corpus to start coverage-guided fuzzing?▼

Yes, you need to provide a target binary and a seed corpus to start a coverage-guided fuzzing campaign with AFL++, enabling the instrumentation to effectively discover memory issues.