Attackers don't just crawl code at random. Starting with known crashes or obfuscated commits is always faster.