Fuzzing Javascript Engines for Fun and Pwnage

Explore methods for finding vulnerabilities in Javascript Engines through fuzzing in this conference talk from the Hack In The Box Security Conference. Dive into the process of creating fuzzer components and efficiently generating Javascript syntax. Learn about a unique crash classification method and parallel fuzzing framework. Gain insights on patternizing 1-day case analysis results for random Javascript syntax generation and discover the custom L.E.G.O. pattern. Benefit from tips and techniques shared by security researchers Areum Lee and Jeonghoon Shin as they discuss their approach to enhancing web browser security through Javascript Engine fuzzing.

#HITB2018AMS D1T1 - Fuzzing Javascript Engines for Fun and Pwnage - Areum Lee & Jeonghoon Shin