aflpp
Warn
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches a header file (argv-fuzz-inl.h) and clones the source code from the official AFL++ GitHub repository.
- [COMMAND_EXECUTION]: Creates a shell wrapper script (./afl++) that utilizes bash -c to execute arbitrary commands on the host or within a Docker container.
- [PRIVILEGE_ESCALATION]: The provided wrapper script runs Docker with the --privileged flag, which provides the container with full access to the host's hardware and kernel features.
- [PRIVILEGE_ESCALATION]: The installation and optimization steps involve running commands with root privileges and modifying the system bootloader to disable kernel security mitigations (mitigations=off).
Audit Metadata