Repository files navigation

A unified shared library which aids in building fuzzers for browsers or as complement for an already existing fuzzing framework.

Octo.js bundles core functions and generic boilerplate code commonly used in most frameworks for fuzzing browsers. It is designed for the sharing of improvements between our individual fuzzers, and with the purpose of reducing the maintainability of those core features with minimal effort.

Octo's future aims to be a stable, well-tested and well-documented standard library for fuzzing in a JavaScript environment.

• Table of Contents
  • Playbook
  • Usage in Node
  • Usage in Browser
  • Development
  • Testing
  • API Documentation
  • What do the developers say?

https://npm.runkit.com/@mozillasecurity/octo

yarn add @mozillasecurity/octo

const{ random, make}=require("@mozillasecurity/octo");random.init();// Common Operationsmake.number.any();make.text.any();// WebCryptomake.crypto.randomAlgorithm();// WebGLmake.webgl.randomSamplerParameter();

Take a look into the API documentation for further use cases.

yarn installyarn build

A bundled production build (octo.js) is placed into the localdist directory.

yarn lintyarn testyarn build

Octo.js uses Jest for testing. Each directory should contain a__tests__ folder containing the tests.

yarn test

• https://mozillasecurity.github.io/octo

or

yarn docs

• Divide-by-zero in [@webrtc::I420Buffer::CropAndScaleFrom]

  Impressive that the fuzzer found such a high multiple of 65536. I'd expect it to start with common edge cases like -1, 0, 1, etc.