"Canonical", randomized crawl version optimal for most browsers (very slow
with MSIE):

  cross_fuzz_randomized_20100729_seed.html (original)
  cross_fuzz_randomized_20110105_seed.html (updated for better repros)

MSIE-optimized version of that fuzzer (triggers msie_crash.txt reliably):

  cross_fuzz_msie_randomized_seed.html

These fuzzers put PRNG seed in the hash part of the URL; or can be provided 
with a previous seed the same way. To minimize the influence of network 
timing, make a local copy of the fuzzer and its subresources where possible.

When downloading, note that every variant also requires a copy of targets/ 
and mersenne.js (and logo.jpg if you want to fuzz in style).

IMPORTANT: You need to allow popups for the fuzzers to work properly.

Name                                          Last modified      Size  
Parent Directory                                                   -   
targets/                                      24-Dec-2011 10:09    -   
msie_crash.txt                                07-Jan-2011 22:31  3.7K  
mersenne.js                                   15-Sep-2010 05:35  8.9K  
logo.jpg                                      28-Jul-2010 23:18   33K  
cross_fuzz_randomized_20110105_seed.html      14-Apr-2011 22:31   17K  
cross_fuzz_randomized_20100729_seed.html      15-Sep-2010 05:40   14K  
cross_fuzz_msie_randomized_seed.html          22-Dec-2010 05:44   14K