AFL++ (Product): news timeline & CVEs

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

GitHub Security Lab's Taskflow Agent autonomously fuzzes C/C++ repositories with AFL++ and writes vulnerability reports.

GitHub Security Lab published the Fuzzing Taskflow, an LLM agent pipeline that fuzzes a C/C++ GitHub repository end to end. Given an owner/repo slug, it finds entry points, writes harnesses, runs AFL++, iterates on coverage, triages crashes, and drafts a report per unique bug. It defaults to Claude Sonnet 5 and executes afl-fuzz, clang, and model-chosen build commands on the host without a container.

GitHub Blog · SecuritySep 24, 18:26 UTC · 2d agoTools

AIJon: Automated Generation of Annotations for Fuzzing

AIJON uses LLMs to auto-generate IJON-style fuzzing annotations, matching human-expert quality on the Magma benchmark.

Researchers replicate IJON experiments and propose AIJON, a system that uses LLMs to automatically generate expert-style annotations for coverage-guided fuzzing at scale. On the Magma benchmark, LLM-generated annotations performed comparably to human-generated ones, though annotation-based fuzzing was not strictly better than AFL++. The paper analyzes how annotations affect fuzzer energy distribution across campaigns.

arXiv cs.CRSep 16, 10:50 UTC · 10d agoResearch1

AFL++

Timeline2 articles

Appears with

AI-powered fuzzing with the GitHub Security Lab Taskflow Agent

AIJon: Automated Generation of Annotations for Fuzzing