aflpp
Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, parallel main and secondary campaigns, persistent mode, corpus minimization, and crash triage. Use when scaling fuzzing across cores, fuzzing a mature C/C++ codebase, reading the afl-fuzz status screen, or moving on after libFuzzer has plateaued.
Install
With your agent
Install OMGSkills skill "trailofbits/skills:aflpp" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/testing-handbook-skills/skills/aflpp ~/.claude/skills/aflpp
From README
AFL++ AFL++ is a fork of the original AFL fuzzer that offers better fuzzing performance and more advanced features while maintaining stability. A major benefit over libFuzzer is that AFL++ has stable support for running fuzzing campaigns on multiple cores, making it ideal for large-scale fuzzing efforts. When to Use | Fuzzer | Best For | Complexity | |--------|----------|------------| | AFL++ | Multi-core fuzzing, diverse mutations, mature projects | Medium | | libFuzzer | Quick , single-threaded, simple harnesses | Low | | LibAFL | Custom fuzzers, research, advanced use cases | High | Choose AFL++ when: You need multi-core fuzzing to maximize throughput Your project can be compiled with Clang or GCC You want diverse mutation strategies and mature tooling libFuzzer has plateaued and you need more coverage You're fuzzing production codebases that benefit from parallel execution Compile and run: AFL++ has many dependencies including LLVM, Python, and Rust.
More from this repo
address-sanitizer
Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
agentic-actions-auditor
Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...
algorand-vulnerability-scanner
Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees,...
