Fuzzilii is a JavaScript engine fuzzing library, it’s a coverage-guided fuzzer for dynamic language interpreters based on a custom intermediate language “FuzzIL” which can be mutated and translated to JavaScript. https://github.com/googleprojectzero/fuzzilli