Exposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing

Explore a conference talk that uncovers critical vulnerabilities in programming languages through differential fuzzing techniques. Learn about undocumented functions enabling OS command execution, exposure of sensitive file contents in error messages, unexpected interpretation of native code, and potential misuse of constant names as strings for OS commands. Discover practical examples and findings across Python, Perl, JavaScript, JRuby, and PHP implementations. Gain insights into the extended differential fuzzing framework and its application to various programming languages, revealing hidden exploitable behaviors that could compromise system security.