# aflpp

> Claude/Codex skill by [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars · Updated 2026-10-28

Sets up and runs AFL++ for multi-core fuzzing of C/C++ projects built with afl-clang-fast or afl-gcc-fast. Covers instrumentation modes, parallel main and secondary campaigns, persistent mode, corpus minimization, and crash triage. Use when scaling fuzzing across cores, fuzzing a mature C/C++ codebase, reading the afl-fuzz status screen, or moving on after libFuzzer has plateaued.

Tags: agent-skills

## Install

```sh
git clone https://github.com/trailofbits/skills /tmp/skills && ln -s /tmp/skills/plugins/testing-handbook-skills/skills/aflpp ~/.claude/skills/aflpp
```

## From README

AFL++ AFL++ is a fork of the original AFL fuzzer that offers better fuzzing performance and more advanced features while maintaining stability. A major benefit over libFuzzer is that AFL++ has stable support for running fuzzing campaigns on multiple cores, making it ideal for large-scale fuzzing efforts. When to Use | Fuzzer | Best For | Complexity | |--------|----------|------------| | AFL++ | Multi-core fuzzing, diverse mutations, mature projects | Medium | | libFuzzer | Quick , single-threaded, simple harnesses | Low | | LibAFL | Custom fuzzers, research, advanced use cases | High | Choose AFL++ when: You need multi-core fuzzing to maximize throughput Your project can be compiled with Clang or GCC You want diverse mutation strategies and mature tooling libFuzzer has plateaued and you need more coverage You're fuzzing production codebases that benefit from parallel execution Compile and run: AFL++ has many dependencies including LLVM, Python, and Rust.

## Links

- HTML page: https://omgskills.com/library/trailofbits/skills/aflpp/
- GitHub: https://github.com/trailofbits/skills
- Author: [@trailofbits](https://omgskills.com/library/trailofbits/index.md)

## More from this repo

- [address-sanitizer](https://omgskills.com/library/trailofbits/skills/address-sanitizer/index.md) — Builds and runs code under AddressSanitizer to catch buffer overflows, use-after-free, and other memory errors during...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 8.1k stars
- [agentic-actions-auditor](https://omgskills.com/library/trailofbits/skills/agentic-actions-auditor/index.md) — Audits GitHub Actions workflows for security vulnerabilities in AI agent integrations including Claude Code Action,...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars
- [algorand-vulnerability-scanner](https://omgskills.com/library/trailofbits/skills/algorand-vulnerability-scanner/index.md) — Scans Algorand smart contracts for 11 common vulnerabilities including rekeying attacks, unchecked transaction fees,...
   - [@trailofbits](https://omgskills.com/library/trailofbits/index.md) · 7.9k stars