๐Ÿงช
QualityGo

AFL++ Fuzzing

by xalgord

AFL++ Fuzzing is a Quality skill for Claude Code, published by xalgord in xalgorix.

852 stars153 forkson xalgord/xalgorixAdded 2026/08/12+1% in starsRepository updated 2026/08/11
ai-agentai-securityautomationautonomous-pentestingbug-bountycybersecurityethical-hackinggolangpenetration-testingpentestpentesting-toolsreconsecuritysecurity-researchsecurity-toolstypescriptvulnerability-detectionvulnerability-scanner
Install in seconds
Install AFL++ Fuzzing
Copy AFL++ Fuzzing into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.
terminal
npx degit https://github.com/xalgorix/xalgorix/tree/main/internal/tools/skills/data/application-security/performing-fuzzing-with-aflplusplus ~/.claude/skills/performing-fuzzing-with-aflplusplus

Requires Node.js. Downloads this skill only โ€” not the rest of the repository โ€” into your Claude Code skills folder.

Without Node.js

git clone https://github.com/xalgorix/xalgorix.git

Clones the whole repository, then copy the skillโ€™s own directory into your skills folder yourself.

In this catalog

Source file
internal/tools/skills/data/application-security/performing-fuzzing-with-aflplusplus/SKILL.md in xalgord/xalgorix
Installs to
~/.claude/skills/performing-fuzzing-with-aflplusplus
Collection
One of 51 skills cataloged from this repository
Category
Quality โ€” 1354 skills

What AFL++ Fuzzing does

AFL++ Fuzzing performs coverage-guided fuzzing of compiled binaries to find crashes and hangs. Use it when instrumenting a target, preparing seed corpora, and triaging unique findings during security testing.

AFL++ Fuzzing is cataloged under Quality on DirSkills. AFL++ Fuzzing comes from a repository tagged ai-agent, ai-security, automation, autonomous-pentesting and bug-bounty.

Documentation

README

Performing Fuzzing with AFL++

Overview

AFL++ is a community-maintained fork of American Fuzzy Lop (AFL) that provides coverage-guided fuzzing for compiled binaries. It instruments targets at compile time or via QEMU/Unicorn mode for binary-only fuzzing, then mutates input corpora to discover new code paths. AFL++ includes advanced scheduling (MOpt, rare), custom mutators, CMPLOG for input-to-state comparison solving, and persistent mode for high-throughput fuzzing.

When to Use

  • When conducting security assessments that involve performing fuzzing with aflplusplus
  • When following incident response procedures for related security events
  • When performing scheduled security testing or auditing activities
  • When validating security controls through hands-on testing

This is the opening of the README. Read the full README on GitHub.

Frequently asked about AFL++ Fuzzing

  • What else does xalgord publish alongside AFL++ Fuzzing?

    AFL++ Fuzzing is one of 51 skills that DirSkills catalogs from xalgord/xalgorix, the repository it ships in. Its siblings there include AI Security Guardrails, AI-Assisted Vulnerability Discovery and API Abuse Detection with Rate Limiting. Each one is a separate skill with its own page in this directory, installs the same way AFL++ Fuzzing does, and is maintained by xalgord in that same repository. The rest of the collection is listed on the xalgord/xalgorix page.

  • How does AFL++ Fuzzing compare to other Quality skills?

    AFL++ Fuzzing ranks #911 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of AFL++ Fuzzing against them. Open each page to compare what they document and how they install.

More from xalgord/xalgorix

AFL++ Fuzzing is one of 51 skills cataloged on DirSkills from xalgord/xalgorix.

See all 51 skills โ†’
๐Ÿ›ก๏ธ
2026/07/20

AI Security Guardrails

Implement input and output validation guardrails to prevent prompt injection, jailbreaks, PII leaks, and off-topic responses in LLM-powered applications.
AI Engineering
852151
๐Ÿ›ก๏ธ
2026/07/20

AI-Assisted Vulnerability Discovery

Uses LLMs to generate valid fuzzing seeds, evolve grammars from coverage feedback, and help reproduce and triage crashes in authorized security research. Also supports evidence-based analysis of Burp traffic and report drafting.
AI Engineering
852151
๐Ÿ›ก๏ธ
2026/07/20

API Abuse Detection with Rate Limiting

Implements API abuse detection using token bucket, sliding window, and adaptive rate limiting algorithms to prevent DDoS, brute force, and scraping attacks. Includes distributed Redis-backed limiters with verification steps.
DevOps
852151
๐Ÿ”
3w ago

API Authentication Testing

API Authentication Testing checks REST API auth for bypasses, weak JWT validation, exposed endpoints, and token lifecycle issues. Use it when validating login, session, refresh, or API key protections before release.
Quality
852153
๐Ÿ”
2026/07/20

API Fuzzing with RESTler

Uses Microsoft RESTler to perform stateful REST API fuzzing by automatically generating and executing test sequences.
Quality
852151
๐Ÿ”’
2026/07/20

API Gateway Security Controls

Provides configurations for API gateways (Kong, AWS) to enforce JWT authentication, rate limiting, request validation, and security headers, helping protect backend APIs from injection, token misuse, and other threats.
DevOps
852151