bjrjk/pwn-learning

Files

History

Jack Ren b871bb78c7 Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

..

args.gn

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

Exploit.js

Level 2 of PwnCollegeV8Exploitation

2024-09-07 13:41:22 +08:00

patch

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

README.md

Level 2 of PwnCollegeV8Exploitation

2024-09-07 13:41:22 +08:00

REVISION

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

README.md

Level 2

Problem

Given the following primitves:

AddressOf
Arbitrary Read & Write in Sandbox

Key Knowledge

Pointer Compression in V8
V8 Optimization Tiers
- Intepreter Ignition
- Non-optimizing JavaScript compiler Sparkplug
- Mid-tier optimizing compiler Maglev
- Top-tier optimizing compiler Turbofan / Turboshaft
V8 Native Syntaxs
- V8引擎漏洞分析环境与调试方法基础
JIT Spray in V8
Shellcraft of Pwntools