AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
GitHub Security Lab's Taskflow Agent autonomously fuzzes C/C++ repositories with AFL++ and writes vulnerability reports.
GitHub Security Lab published the Fuzzing Taskflow, an LLM agent pipeline that fuzzes a C/C++ GitHub repository end to end. Given an owner/repo slug, it finds entry points, writes harnesses, runs AFL++, iterates on coverage, triages crashes, and drafts a report per unique bug. It defaults to Claude Sonnet 5 and executes afl-fuzz, clang, and model-chosen build commands on the host without a container.
46