domains / families / security / browser-exploitation-v8

browser-exploitation-v8

separate

Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass to achieve renderer RCE and sandbox escape in Chrome/Chromium.

When to use

• JIT type confusion
• incorrect bounds elimination
• V8 sandbox bypass
• renderer RCE
• sandbox escape
• addrof/fakeobj primitives
• ArrayBuffer corruption
• WASM RWX pages

Skill page

Source