The V8 Sandbox · V8
After almost three years since the initial design document and hundreds of CLs in the meantime, the V8 Sandbox — a lightweight, in-process sandbox for V8 — has now progressed to the point where it is no longer considered an experimental security feature. Starting today, the V8 Sandbox is included in Chrome's Vulnerability Reward Program (VRP). While there are still a number of issues to resolve be
Control-flow Integrity in V8 · V8
Control-flow integrity (CFI) is a security feature aiming to prevent exploits from hijacking control-flow. The idea is that even if an attacker manages to corrupt the memory of a process, additional integrity checks can prevent them from executing arbitrary code. In this blog post, we want to discuss our work to enable CFI in V8. Background # The popularity of Chrome makes it a valuable target for
Exploiting Chrome V8: Krautflare (35C3 CTF 2018) · Jay Bosamiya
In this challenge, we had to obtain remote code execution, simply by exploiting a 1-day bug that forgot the difference between -0 and +0. This has probably been one of the most difficult, fun, and frustrating bugs I have ever exploited. As someone who has never exploited a JavaScript engine vulnerability ever before, this challenge was a journey, filled with tons of ups and downs. I had an approxi
katagaitai CTF勉強会 #11 Pwnable編 - PlaidCTF 2016 Pwnable666 js_sandbox / katagaitai CTF #11
katagaitai CTF勉強会 #11 関東|med，#10+11 関西|medで発表した資料です． 閲覧自由ですが，社会人の方はなるべくWikipediaなどお好きなサービスやOSSに￥1000の寄付をしてあげて下さい(←流行らせたい)． Chromeなどで使われるJavaScriptエンジンであるV8のPwnable問です．JavaScriptエンジンに対する最近のexploitの多くで利用される，length系exploitの初歩を解説しています．攻撃テクニックが中心だった過去資料とはことなり，V8の構造についての解説が多めです．問題バイナリのDLリンクはこちらです．→https://goo.gl/73vQ1U
About that hash flooding vulnerability in Node.js… · V8
Show navigation Early July this year, Node.js released a security update for all currently maintained branches to address a hash flooding vulnerability. This intermediate fix comes at the cost of a significant startup performance regression. In the meantime, V8 has implemented a solution which avoids the performance penalty. In this post, we want to give some background and history on the vulnerab
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Intent to Ship: Long Task API - Google Groups
