Exploitation

Intro to Chrome’s V8 from an exploit development angle

28 February 2020 ~11 min By Javier Jimenez
Browser Browsers Chrome Exploit Development Exploitation Javascript Reverse Engineering V8
Last Christmas I was doing quite a bit of research around an exploit for Chrome’s JavaScript engine, V8. While most of the concepts around the exploit might seem familiar: for example, what is known as a Type Confusion today has the almost exact concept (or outcome) as a Use-After-Free vulnerability, one of the differences is that there is no free/malloc exploited directly; there is a huge difference in the root…