Does AFL++ support parallel execution?

Yes, AFL++ excels at multi-core fuzzing by allowing you to run a primary fuzzer alongside multiple secondary instances, scaling throughput linearly with your CPU cores.

Why should I use AFL++ instead of libFuzzer?

AFL++ offers superior performance on multi-core systems, more diverse mutation strategies, and better stability for large-scale, mature projects compared to libFuzzer.

Can I use AddressSanitizer (ASan) with AFL++?

Yes, AFL++ supports ASan integration via environment variables during compilation, though you must disable memory limits (-m 0) due to ASan's virtual memory reservation.

What is CMPLOG and how does it help?

CMPLOG (RedQueen) is an advanced path-constraint solving mechanism that observes comparison instructions to help the fuzzer bypass hard-to-reach code paths, significantly increasing coverage.

AFL++ Fuzzing Guide

Name: AFL++ Fuzzing Guide
Author: fjor1025

byfjor1025

0•

安全与测试

Provides comprehensive guidance and implementation patterns for high-performance multi-core fuzzing of C/C++ projects using AFL++.

This skill empowers Claude to assist developers and security researchers in implementing advanced fuzzing campaigns using AFL++. It covers everything from initial setup and installation via Docker or source, to writing robust libFuzzer-style harnesses, optimizing compilation with LTO and LLVM modes, and managing multi-core execution for maximum throughput. By providing domain-specific patterns for corpus minimization, sanitizer integration, and CMPLOG path constraint solving, it ensures efficient discovery of memory corruption bugs and security vulnerabilities in complex codebases.

主要功能

01High-performance instrumentation using LTO and LLVM modes

02Integrated memory corruption detection with ASan and UBSan

03Advanced mutation strategies and CMPLOG path solving

04Multi-core fuzzing orchestration and monitoring

050 GitHub stars

06LibFuzzer-style harness design and implementation patterns

使用场景

01Scaling security testing for mature C/C++ libraries using parallel execution

02Automating the discovery of edge-case crashes and memory leaks in production code

03Transitioning from basic single-threaded fuzzers to advanced coverage-guided fuzzing

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add fjor1025/infosec-framework aflpp

For use in Claude.ai and ChatGPT

Download Skill