Exposing Hidden Exploitable Behaviors Using EDF
Explore advanced techniques for exposing hidden exploitable behaviors in programming languages using Differential Fuzzing. Learn about the technical aspects of analyzing unexpected behaviors in interpreters, including methods to detect over 20 different types of issues beyond crashes. Discover practical examples of identifying undocumented functions allowing OS command execution, sensitive file content exposure in error messages, unexpected native code interpretation, and potential vulnerabilities in constant naming. Gain insights into the capabilities of differential fuzzing, with a focus on JavaScript, Perl, PHP, Python, and Ruby. Includes a special release of the fuzzer and covers topics such as fuzzing processes, input analysis, software examination, and automated output analysis techniques.