afl-cmin(8)

🎀 NAME 🎀

Okay bestie, welcome to afl-cmin(8) — that's the manual page name — straight out of the System Manager's Manual. The NAME section is literally just afl-cmin and nothing else, and honestly? iconic minimalism. 💅

---

✨ SYNOPSIS ✨

afl-cmin

---

💅 OPTIONS 💅

Here's the exact usage line, copied with love and zero typos:

usage: afl-cmin [-h] -i dir -o dir [-f file] [-m megs] [-t msec] [-O] [-Q]
                [-U] [-X] [--crash-dir dir] [-A] [-C] [-e] [-T WORKERS]
                [--as_queue] [--no-dedup] [--debug]
                /path/to/target_app [args ...]

positional arguments:

• /path/to/target_app — the target app path goes right here, bestie. 🎯
• args — the extra args for the target app, exactly like the usage line says. 🫶

options:

• -h, --help — show this help message and exit — the classic "help me help you" moment. ✨

Required parameters:

• -i dir — input directory with the starting corpus — your origin-story files go here. 🌸
• -o dir — output directory for minimized files — this is where the glow-up results land. 🎀

Execution control settings:

• -f file — location read by the fuzzed program (stdin) — the file spot, stdin style. 📥
• -m megs — memory limit for child process (default: none) — cap the child process memory if you want. 🧠
• -t msec — timeout for each run (default: 5000) — how long each run gets before we move on. ⏱️
• -O — use binary-only instrumentation (FRIDA mode) — FRIDA mode activated. 🧚
• -Q — use binary-only instrumentation (QEMU mode) — QEMU mode, say less. 🦋
• -U — use unicorn-based instrumentation (Unicorn mode) — Unicorn mode, literally magical. 🌈
• -X — use Nyx mode — Nyx mode has entered the chat. 👑

Minimization settings:

• --crash-dir dir — move crashes to a separate dir, always deduplicated — crashes get their own folder, and the dedup is always on. 💥
• -A — allow crashes and timeouts (not recommended) — ⚠️ not recommended, bestie; this is the risky little gremlin setting.
• -C — keep crashing inputs, reject everything else — crashy inputs stay, everything else gets rejected. 🚫
• -e — solve for edge coverage only, ignore hit counts — edge coverage only, hit counts can take a nap. 🧩

Misc:

• -T WORKERS — number of concurrent worker (default: 1) — yes, the page says "worker" singular, and we're not fixing it. 👯‍♀️
• --as_queue — output file name like "id:000000,hash:value" — queue-style naming, very demure. 🏷️
• --no-dedup — skip deduplication step for corpus files — no dedup step for corpus files, periodt. 🙅‍♀️
• --debug — the page just drops this flag here with no extra explanation, so the mystery stays mysterious. 🕵️‍♀️

---

👑 AUTHOR 👑

AFL++ was written by Michal "lcamtuf" Zalewski and is maintained by Marc "van Hauser" Heuse <mh@mh-sec.de>, Dominik Maier <domenukk@gmail.com>, Andrea Fioraldi <andreafioraldi@gmail.com> and Heiko "hexcoder-" Eissfeldt <heiko.eissfeldt@hexco.de>. The homepage of AFL++ is: https://github.com/AFLplusplus/AFLplusplus 🌟

---

🌈 LICENSE 🌈

AFL++ is licensed under AGPL-3.0-or-later, with original components under Apache-2.0; an optional commercial license is available. See https://github.com/AFLplusplus/AFLplusplus/blob/stable/LICENSING.md 📜

---

This page is from AFL++, dated 2026-06-05, and it's the afl-cmin(8) manual — mwah, bye bestie! 💖🦋