Exploits

Exploits copied to clipboard

Hello, I'm trying to understand create_fake_jsarray_obj() function. I have a question about how to get information about JSArray structure. (like map object or oddball) I've read source code but it...

ganado

In CVE-2015-6764 exploit, function `leak_textobj_elements_pointer()` can be used to get the `textobj_elements_pointer`. But why does it work? I figure out that `g_textobj_pointer` stored in the second `InternalField` of `JSObject`. What...

alset0326