Later archive addition

Exposing Hidden Exploitable Behaviors in Programming Languages Using Differential Fuzzing

Fernando Arnaboldi · IOActive / Black Hat

XDiFF compares outputs and side effects across language implementations, operating systems and input modes. Canaries expose unexpected execution, file access and network activity in PHP, Ruby, Perl, Python and JavaScript examples. Several cases are intended facilities made dangerous by untrusted input; demonstrated web chains have specific application prerequisites.

Record

Researcher

Fernando Arnaboldi

Published by

IOActive / Black Hat

Format

Whitepaper

In the archive

• Added to the 2016–17 archive after the original list was published

Related sources

• XDiFF research code

Tags

• differential-fuzzing
• injection
• tooling
• owasp-a03-2021

This page is the archive's own catalogue record. The research is the work of Fernando Arnaboldi, first published at the original source. Preserved copies are kept so the citation survives its host.