CTF/pwn writeups and V8 exploitation notes.

A technical writeup on a 0day vulnerability I reported inside V8, Chrome's JS engine

Authored by stratan In Part 1, we went over the background details that are needed to follow along, as well as the trigger specifics of the bug. In Part 2, we'll go through the relevant code paths, analyze the patch, and develop an in-cage read/write primitive. Disclaimer This article has been prepared for

Publications from Calif. Contribute to califio/publications development by creating an account on GitHub.

Arc Browser UXSS, Local File Read, Arbitrary File Creation and Path Traversal to RCE After announcing the bug bounty program I downloaded the browser and started looking for vulnerabilities, using my …

Minimal code to connect to a CEF debugger

Technical breakdown of a Remote Code Execution vulnerability in Google Web Designer via a malicious Video Ad Template abusing the NinjaShell API.

Mutation-Based XSS + V8 type confusion + V8 sandbox escape = RCE on Basecamp. Disclosed it on Hackerone: https://t.co/slsv3j4jXx go read the comments if you wanna see what a week of exploit dev pain looks like.

With some luck and a couple of XSS bugs I was able to break the new Edge