/Favocado

A DOM fuzzer.

Primary LanguageJavaScriptGNU General Public License v3.0GPL-3.0

Favocado

Prerequisites

Notice

this master branch only contain core parts. you may need to implement new binding objects following files in Binding folder.

please check these branchs for configuration examples.

  • pdf-js for fuzzing PDF objects.
  • chromium for fuzzing DOM objects in chromium.
  • webkitgtk++ for fuzzing DOM objects in webkitgtk++.
  • mojom for fuzzing Mojom IPC (updating).

Usage:

Generate Testcase

  • Generate html copus: node .\Generator\Run\Gen.js -o output -n 10

Context-dependent Fuzzing.

To fuzzing in context-dependent you need to set up a Logger, which will writeout(realtime) generated code when fuzzing. check this repo for more detail.