The Butterfly of JSObject

The Butterfly of JSObject

Channel:
United States LiveOverflow
Subscribers:
920,000
Published on ● Video Link: https://www.youtube.com/watch?v=KVpHouVMTgY


Duration: 10:56
50,733 views
1,721

Part 2: Let's have a look at how JavaScriptCore implements JavaScript Objects and values like integers and floats. We can use lldb to look into the memory.

Phrack: http://phrack.org/papers/attacking_javascript_engines.html
The Linus: https://twitter.com/linushenze
The Exploit: https://github.com/LinusHenze/WebKit-RegEx-Exploit
The Fix: https://bugs.webkit.org/show_bug.cgi?id=191731

-=[ 🕴️Advertisement ]=-

This video is supported by SSD Secure Disclosure: https://ssd-disclosure.com/
Offensive Security Conference TyphoonCon (10th - 14th June 2019): https://typhooncon.com/

-=[ 🔴 Stuff I use ]=-

→ Microphone:* https://geni.us/ntg3b
→ Graphics tablet:* https://geni.us/wacom-intuos
→ Camera#1 for streaming:* https://geni.us/sony-camera
→ Lens for streaming:* https://geni.us/sony-lense
→ Connect Camera#1 to PC:* https://geni.us/cam-link
→ Keyboard:* https://geni.us/mech-keyboard
→ Old Microphone:* https://geni.us/mic-at2020usb

US Store Front:* https://www.amazon.com/shop/liveoverflow

-=[ ❤️ Support ]=-

→ per Video: https://www.patreon.com/join/liveoverflow
→ per Month: https://www.youtube.com/channel/UClcE-kVhqyiHCcjYwcpfj9w/join

-=[ 🐕 Social ]=-

→ Twitter: https://twitter.com/LiveOverflow/
→ Website: https://liveoverflow.com/
→ Subreddit: https://www.reddit.com/r/LiveOverflow/
→ Facebook: https://www.facebook.com/LiveOverflow/

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

#BrowserExploitation



Other Videos By LiveOverflow


2019-07-21Arbitrary Read and Write in WebKit Exploit
2019-07-14Preparing for Stage 2 of a WebKit exploit
2019-07-07Speedrun Hacking Buffer Overflow - speedrun-001 DC27
2019-07-04YouTube BANNING Hacking Videos - Hot Take
2019-06-30Revisiting JavaScriptCore Internals: boxed vs. unboxed
2019-06-26Paste-Tastic! - Post Google CTF 2019 Stream
2019-06-23The fakeobj() Primitive: Turning an Address Leak into a Memory Corruption
2019-06-16Building an 8-Bit Computer From Scratch
2019-06-16WebKit RegExp Exploit addrof() walk-through
2019-06-09Just-in-time Compiler in JavaScriptCore (WebKit)
2019-06-02The Butterfly of JSObject
2019-05-26Hacking Browsers - Setup and Debug JavaScriptCore / WebKit
2019-05-19New Series: Getting Into Browser Exploitation - browser 0x00
2019-05-12The Origin of Script Kiddie - Hacker Etymology
2019-05-05Unpacking Redaman Malware & Basics of Self-Injection Packers - ft. OALabs
2019-04-28Business, Money, 300k Subscribers and What's Next
2019-04-21GitLab 11.4.7 Remote Code Execution - Real World CTF 2018
2019-04-14Fuzzing Browsers for weird XSS Vectors
2019-04-07How did Masato find the Google Search XSS?
2019-04-01[Live] Pen-Testing and Story Time
2019-03-31XSS on Google Search - Sanitizing HTML in The Client?


Tags:
Live Overflow
liveoverflow
hacking tutorial
how to hack
exploit tutorial
browser exploitation
js value
webkit
chrome
safari
osx
lldb
jsobject
jscell
jsc
javascriptcore
butterfly
array
properties
javascript
object
js
jit
compiler