diff --git a/pkgs/tools/security/afl/default.nix b/pkgs/tools/security/afl/default.nix
new file mode 100644
index 000000000000..402071b61c80
--- /dev/null
+++ b/pkgs/tools/security/afl/default.nix
@@ -0,0 +1,32 @@
+{ stdenv, fetchurl, bash }:
+
+stdenv.mkDerivation rec {
+  name    = "afl-${version}";
+  version = "0.68b";
+
+  src = fetchurl {
+    url    = "http://lcamtuf.coredump.cx/afl/releases/${name}.tgz";
+    sha256 = "07z5lnkl82d6rpm63wr7lxs3g49wb7lw8zi9wwazzv2hi7l2vcs7";
+  };
+
+  buildPhase   = "make PREFIX=$out";
+  installPhase = "make install PREFIX=$out";
+
+  meta = {
+    description = "Powerful fuzzer via genetic algorithms and instrumentation";
+    longDescription = ''
+      American fuzzy lop is a fuzzer that employs a novel type of
+      compile-time instrumentation and genetic algorithms to
+      automatically discover clean, interesting test cases that
+      trigger new internal states in the targeted binary. This
+      substantially improves the functional coverage for the fuzzed
+      code. The compact synthesized corpora produced by the tool are
+      also useful for seeding other, more labor or resource-intensive
+      testing regimes down the road.
+    '';
+    homepage    = "http://lcamtuf.coredump.cx/afl/";
+    license     = stdenv.lib.licenses.asl20;
+    platforms   = stdenv.lib.platforms.linux;
+    maintainers = [ stdenv.lib.maintainers.thoughtpolice ];
+  };
+}
diff --git a/pkgs/top-level/all-packages.nix b/pkgs/top-level/all-packages.nix
index 8a7f52cc209a..af54d6d69edf 100644
--- a/pkgs/top-level/all-packages.nix
+++ b/pkgs/top-level/all-packages.nix
@@ -465,6 +465,8 @@ let
 
   aescrypt = callPackage ../tools/misc/aescrypt { };
 
+  afl = callPackage ../tools/security/afl { };
+
   ahcpd = callPackage ../tools/networking/ahcpd { };
 
   aide = callPackage ../tools/security/aide { };