All You Need Is A Fuzzing Brain: An LLM-Powered System for Automated
  Vulnerability Detection and Patching
Our team, All You Need Is A Fuzzing Brain, was one of seven finalists in
DARPA's Artificial Intelligence Cyber Challenge (AIxCC), placing fourth in the
final round. During the competition, we developed a Cyber Reasoning System
(CRS) that autonomously discovered 28 security vulnerabilities - including six
previously unknown zero-days - in real-world open-source C and Java projects,
and successfully patched 14 of them. The complete CRS is open source at
https://github.com/o2lab/afc-crs-all-you-need-is-a-fuzzing-brain. This paper
provides a detailed technical description of our CRS, with an emphasis on its
LLM-powered components and strategies. Building on AIxCC, we further introduce
a public leaderboard for benchmarking state-of-the-art LLMs on vulnerability
detection and patching tasks, derived from the AIxCC dataset. The leaderboard
is available at https://o2lab.github.io/FuzzingBrain-Leaderboard/.
68c362c0fc1747b91240396b
Ze Sheng
68c362c0fc1747b91240396c
Qingxiao Xu
claimed_verified
2025-09-12T16:09:29.897Z
68c361f799425375adc5a335
/avatars/c4fcd2d2511ac1362a462f2e1a2b41e5.svg
Qingxiao Xu
user
Kitxuu
68c362c0fc1747b91240396d
Jianwei Huang
68c362c0fc1747b91240396e
Matthew Woodcock
68c362c0fc1747b91240396f
Heqing Huang
68c362c0fc1747b912403970
Alastair F. Donaldson
68c362c0fc1747b912403971
Guofei Gu
68c362c0fc1747b912403972
Jeff Huang
All You Need Is A Fuzzing Brain: An LLM-Powered System for Automated
  Vulnerability Detection and Patching
Our team, All You Need Is A Fuzzing Brain, was one of seven finalists in
DARPA's Artificial Intelligence Cyber Challenge (AIxCC), placing fourth in the
final round. During the competition, we developed a Cyber Reasoning System
(CRS) that autonomously discovered 28 security vulnerabilities - including six
previously unknown zero-days - in real-world open-source C and Java projects,
and successfully patched 14 of them. The complete CRS is open source at
https://github.com/o2lab/afc-crs-all-you-need-is-a-fuzzing-brain. This paper
provides a detailed technical description of our CRS, with an emphasis on its
LLM-powered components and strategies. Building on AIxCC, we further introduce
a public leaderboard for benchmarking state-of-the-art LLMs on vulnerability
detection and patching tasks, derived from the AIxCC dataset. The leaderboard
is available at https://o2lab.github.io/FuzzingBrain-Leaderboard/.
A Cyber Reasoning System using LLMs autonomously discovered and patched security vulnerabilities in open-source projects, with a public leaderboard for benchmarking LLMs on these tasks.
Cyber Reasoning System LLM-powered vulnerability detection patching zero-days