Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/0xricksanchez/AFL_Runner/llms.txt

Use this file to discover all available pages before exploring further.

AFL Runner (aflr) is a modern CLI tool written in Rust that takes the friction out of running multi-core AFLPlusPlus fuzzing campaigns. It implements the official AFL++ multi-core best practices out of the box — automatically distributing power schedules, CMPLOG, CMPCOV, and mutation strategies across all your fuzzer instances — so you can focus on finding bugs rather than tuning flags.

Installation

Install AFL Runner from crates.io or build from source in minutes.

Quickstart

Launch your first multi-core fuzzing campaign with a single command.

Command Reference

Full reference for all aflr subcommands and flags.

Configuration

Use a TOML config file to store and share per-project fuzzing settings.

Why AFL Runner?

Running an efficient AFLPlusPlus multi-core campaign requires correctly assigning one -M main fuzzer, multiple -S secondary fuzzers, rotating power schedules, distributing CMPLOG/CMPCOV instances, and setting up a tmux or screen session — all by hand. AFL Runner automates every part of this, generating the exact command set that mirrors the AFL++ in-depth documentation.

Multi-Core Guide

Step-by-step walkthrough of a full multi-core fuzzing campaign.

Coverage Reporting

Collect and visualize LLVM coverage from your fuzzing corpus.

Session Management

Manage tmux and screen sessions for long-running campaigns.

Shell Completion

Enable tab completion for bash and zsh.

Key Features

1

Generate best-practice AFL++ commands

aflr gen builds the complete set of afl-fuzz invocations following the official multi-core guidelines — one main fuzzer and N-1 secondaries with automatically distributed power schedules, mutation modes, CMPLOG, and CMPCOV assignments.
2

Run campaigns in tmux or screen

aflr run creates a dedicated tmux or screen session, lays out all fuzzer panes, and optionally launches the built-in TUI for a centralized view of campaign progress.
3

Monitor with the TUI

aflr tui opens a real-time terminal dashboard showing executions/sec, crashes, hangs, corpus size, stability, and stage progress across all running fuzzers — a full replacement for afl-whatsup.
4

Collect coverage

aflr cov runs your LLVM-instrumented binary against the entire queue corpus and produces HTML or text coverage reports using llvm-profdata and llvm-cov.

Build docs developers (and LLMs) love