Moved JavaScript/PwnCollegeV8Exploitation/ to PwnCollege/V8Exploitation/
This commit is contained in:
10
PwnCollege/V8Exploitation/Level4/README.md
Normal file
10
PwnCollege/V8Exploitation/Level4/README.md
Normal file
@@ -0,0 +1,10 @@
|
||||
# Level 4
|
||||
|
||||
## Problem
|
||||
|
||||
Given a vulnerability which can set an array's length by using `Array.prototype.setLength()`.
|
||||
|
||||
## Key Knowledge
|
||||
|
||||
- Heap Fengshui
|
||||
- OOB Access other heap content by corrupting array's length
|
||||
Reference in New Issue
Block a user