Resource for VR and ExploitDEV for Chrome browser on Windows

[ccs]

Hello. I would like to work on vulnerability discovery and exploit development for the Chrome browser on Windows. I have some experience in exploit development for Windows (user mode-kernel mode). Is there a cohesive resource like those published for exploit development on Windows or Linux for this as well?

 

[varwar]

https://xss.pro/threads/41261/

Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals

Web browsers, our extensive gateway to the internet. Browsers today play a vital role in modern organizations as more and more software applications are delivered to users via a web browser in the form of web applications. Pretty much everything you might have done on the internet involves the...

jhalon.github.io

Chrome Browser Exploitation, Part 2: Introduction to Ignition, Sparkplug and JIT Compilation via TurboFan

In my previous post “Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals”, we took our first deep dive into the world of browser exploitation by covering a few complex topics that were necessary for fundamental knowledge. We mainly covered topics on how JavaScript...

jhalon.github.io

Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

Welcome to the third and final installment of the “Chrome Browser Exploitation” series. The main objective of this series has been to provide an introduction to browser internals and delve into the topic of Chrome browser exploitation on Windows in greater depth.

jhalon.github.io

Chaining N-days to Compromise All: Part 1âââChrome Renderer RCE

This blog post is first of the series about the vulnerabilities used in our 1-day full chain exploit we demonstrated on X. In this blogâ¦

blog.theori.io

Chaining N-days to Compromise All: Part 2âââWindows Kernel LPE (a.k.a Chrome Sandbox Escape)

We will present how we escaped the Chrome sandbox by exploiting a Windows kernel vulnerability. The vulnerability is CVE-2023â21674.

blog.theori.io