- code fuzzer for American Fuzzy Lop (afl)
[options] -- /path/to/fuzzed/app
This program takes an binary and attempts a variety of fuzzing strategies,
paying close attention on how they affect the execution path.
To operate correctly, the fuzzer requires one or more starting files containing
the typical input normally expected by the targeted application.
For instrumentated fuzzing, the binary must be compiled using either one of the
shipped gcc or clang wrappers. Put -n
to fuzz w/o instrumentation in
Please regard that a full fuzzing process takes a lot of time. For exhaustive
information on afl, see the documentation in /usr/share/doc/afl-doc
without any arguments to see a complete list of options.
American Fuzzy Lop is written by Michal Zalewski <firstname.lastname@example.org>.
Forkserver design by Jann Horn <email@example.com>. This manpage
was written by Daniel Stender <firstname.lastname@example.org>.