Re:Fuzzing is magic – Or how I found a panic in Rust's regex...
by rixrax on Saturday April 01, 2017 @11:41PM
(#14015635)
Peach Fuzzer[p] and Synopsys Defensics[d] should fit the bill. Both are commercial. I'm not aware of any OSS grammar-based fuzzers that would be good for anything (ok; there is Sulley and some others which seemingly haven't been maintained in eons).
[p] www.peachfuzzer.com/ [d] https://www.synopsys.com/software-integrity/security-testing...