bjrjk/pwn-learning

Files

T

History

Jack Ren b871bb78c7 Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

..

args.gn

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

Exploit.js

Minor Changes to Level 3 & 4 of PwnCollegeV8Exploitation

2024-09-15 08:57:29 +08:00

patch

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

README.md

Level 3 of PwnCollegeV8Exploitation

2024-09-08 13:03:33 +08:00

REVISION

Added REVISION, args.gn and patch for existing PwnCollegeV8Exploitation Levels

2024-09-16 17:05:38 +08:00

README.md

Level 3

Problem

Given the following primitves:

AddressOf
FakeObject

Key Knowledge

Fast properties in V8
Static Roots: Objects with Compile-Time Constant Addresses
Use AddressOf & FakeObject to Construct Arbitrary Address Read & Write
- Exploiting v8: *CTF 2019 oob-v8
Know V8 Heap Fengshui by using native syntax