A Methodical Approach to Browser Exploitation. The Exploit Development Lifecycle, From A to Z(ero Day). http://blog.ret2.io/2018/06/05/pwn2own-2018-exploit-development/ #expdev #pwn #webkit #darw1n

Webkit Exploitation Tutorial
https://www.auxy.xyz/tutorial/Webkit-Exp-Tutorial/
#webkit #browser #expdev #tutorial #darw1n

A WebKit exploit using CVE-2018-4441 to obtain RCE on PS4 6.20.

https://github.com/Cryptogenic/PS4-6.20-WebKit-Code-Execution-Exploit

#re #expdev #webkit #browser #ps4 #darw1n

This three-part series highlights the technical challenges involved in finding and exploiting JavaScript engine vulnerabilities in modern web browsers and evaluates current exploit mitigation technologies. The exploited vulnerability, CVE-2020-9802, was fixed in iOS 13.5, while two of the mitigation bypasses, CVE-2020-9870 and CVE-2020-9910, were fixed in iOS 13.6.

JITSploitation I: A JIT Bug
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-one.html

JITSploitation II: Getting Read/Write
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-two.html

JITSploitation III: Subverting Control Flow
https://googleprojectzero.blogspot.com/2020/09/jitsploitation-three.html

#mobile #ios #javascript #browser #jit #webkit #expdev #cve #reverse #darw1n

https://github.com/WebKit/WebKit/blob/main/Source/bmalloc/libpas/Documentation.md

#browsers #webkit #safari #apple #heap #allocators #heapallocators #Aligner