"Canonical", randomized crawl version optimal for most browsers (very slow with MSIE): cross_fuzz_randomized_20100729_seed.html (original) cross_fuzz_randomized_20110105_seed.html (updated for better repros) MSIE-optimized version of that fuzzer (triggers msie_crash.txt reliably): cross_fuzz_msie_randomized_seed.html These fuzzers put PRNG seed in the hash part of the URL; or can be provided with a previous seed the same way. To minimize the influence of network timing, make a local copy of the fuzzer and its subresources where possible. When downloading, note that every variant also requires a copy of targets/ and mersenne.js (and logo.jpg if you want to fuzz in style). IMPORTANT: You need to allow popups for the fuzzers to work properly.
Name Last modified Size
Parent Directory - targets/ 24-Dec-2011 10:09 - msie_crash.txt 07-Jan-2011 22:31 3.7K mersenne.js 15-Sep-2010 05:35 8.9K cross_fuzz_msie_randomized_seed.html 22-Dec-2010 05:44 14K cross_fuzz_randomized_20100729_seed.html 15-Sep-2010 05:40 14K cross_fuzz_randomized_20110105_seed.html 14-Apr-2011 22:31 17K logo.jpg 28-Jul-2010 23:18 33K