aflpp

Automate multi-core fuzzing of C/C++ codebases with AFL++ and sanitizers.

Updated Jan 24, 2026
One-click install
npx skills add https://github.com/amano--/call-center --skill aflpp-amano
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: aflpp
Source: https://github.com/amano--/call-center/tree/main/.gemini/antigravity/skills/trailofbits-security/aflpp
Command: npx skills add https://github.com/amano--/call-center --skill aflpp-amano

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the challenge of finding vulnerabilities in C/C++ codebases by automating the process of discovering bugs through advanced fuzzing techniques.

Core Features & Use Cases

  • Multi-core Fuzzing: Leverages multiple CPU cores to significantly increase fuzzing throughput and speed up vulnerability discovery.
  • Diverse Mutation Strategies: Employs a wide range of mutation techniques to explore more code paths and uncover complex bugs.
  • Sanitizer Integration: Seamlessly integrates with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) to detect memory corruption and undefined behavior bugs.
  • Use Case: You have a critical C library that processes network protocols. Use this Skill to run an intensive, multi-core fuzzing campaign to uncover potential buffer overflows or use-after-free vulnerabilities before they can be exploited.

Quick Start

Use the aflpp skill to fuzz the provided C++ program 'my_program.cc' with a basic harness.

Frequently Asked Questions about aflpp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find vulnerabilities in C++ code using fuzzing?▼

You can find vulnerabilities in C++ code by running an automated multi-core fuzzing campaign with AFL++, which applies diverse mutation strategies to rapidly discover complex bugs.

Does AFL++ integrate with AddressSanitizer for memory corruption detection?▼

Yes, AFL++ integrates seamlessly with AddressSanitizer (ASan) and UndefinedBehaviorSanitizer (UBSan) to detect memory corruption and undefined behavior during C/C++ fuzzing campaigns.

How do I set up a multi-core fuzzing campaign for C/C++ codebases?▼

Multi-core fuzzing campaigns for C/C++ codebases leverage multiple CPU cores to significantly increase fuzzing throughput, requiring a basic harness and corpus management to accelerate vulnerability discovery.

What is the best way to fuzz a C library that processes network protocols?▼

The best way to fuzz a C network protocol library is running an intensive multi-core AFL++ campaign to uncover potential buffer overflows or use-after-free vulnerabilities before deployment.

Can I automate harness writing and corpus management for vulnerability research?▼

Yes, this approach automates vulnerability research by providing dedicated tools for harness writing, corpus management, and result analysis to streamline the discovery of bugs in complex C/C++ projects.