T-Fuzz: Fuzzing by Program Transformation
Steelix: program-state based binary fuzzing