[Bowman]

Fuzzilii is a JavaScript engine fuzzing library, it’s a coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language “FuzzIL” which can be mutated and translated to JavaScript.
https://github.com/googleprojectzero/fuzzilli