googleprojectzero/domato

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1785 stars · 287 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

Domato is a grammar-based DOM fuzzer from Google Project Zero that generates HTML, CSS, and JavaScript test cases for finding browser DOM engine vulnerabilities. Its generation engine is reusable as a Python library for building other generation-based fuzzers with custom grammars.

Use cases

• fuzz browser DOM engines for security bugs
• generate random HTML test cases for crash testing
• write custom grammars for generation-based fuzzing
• find SVG or CSS parsing vulnerabilities in browsers
• bulk-generate fuzz-*.html samples for browser test harnesses

When to choose

• you are doing browser or DOM engine vulnerability research
• you want an extendible grammar-based fuzzer with a reusable generation engine
• you need to generate structured HTML/CSS/JS test cases at scale

When to avoid

• you need coverage-guided mutation fuzzing of non-DOM targets
• you want a turnkey fuzzing harness with crash triage built in
• you are not comfortable running potentially malicious generated test cases in a browser

Facets

cli-tool · maturity maintenance

fuzzing parser security developer-tools security web-development developer-tools python cli cross-platform dom-fuzzing grammar-based-fuzzing browser-security vulnerability-research test-case-generation browsers

Member repositories

For agents

markdown · JSON · MCP: product_card(name="googleprojectzero/domato")