Some V8 n-day exploits that I've written
☆64Oct 31, 2026Updated this week
Alternatives and similar repositories for v8-ndays
Users that are interested in v8-ndays are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆37Apr 14, 2025Updated last year
- QEMU guest-to-host escape exploit☆34Mar 17, 2026Updated 7 months ago
- Integer overflow in FreeType software, which also affects Chrome☆31Jul 14, 2026Updated 3 months ago
- Root Cause Analysis for CVE-2025-43529, a UAF vulnerability due to incorrect DFG StoreBarrierInsertionPhase in JavaScriptCore.☆18Feb 1, 2026Updated 9 months ago
- A collection of various exploits☆31Sep 17, 2024Updated 2 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- ☆45Oct 10, 2025Updated last year
- A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.☆51Feb 6, 2026Updated 8 months ago
- Security research writeups☆19Aug 8, 2026Updated 2 months ago
- ☆226Aug 27, 2025Updated last year
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 10 months ago
- ☆95Aug 26, 2025Updated last year
- Chrome V8 CVE exploits and proof-of-concept scripts written by me, for educational and research purposes only.☆100Aug 25, 2024Updated 2 years ago
- ☆17May 26, 2026Updated 5 months ago
- A in-the-wild V8 type confusion bug.☆32Aug 8, 2025Updated last year
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Toolkit to weaponize Chromium vulnerabilities into reliable, cross-platform, full-chain exploits☆317Mar 23, 2026Updated 7 months ago
- ☆31Nov 25, 2025Updated 11 months ago
- ☆41Feb 28, 2026Updated 8 months ago
- ☆46Oct 14, 2026Updated 2 weeks ago
- Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)☆88Jun 3, 2024Updated 2 years ago
- ☆28Feb 6, 2024Updated 2 years ago
- Chrome V8 n-day exploits that I've written.☆210Apr 8, 2023Updated 3 years ago
- Kernel Read Write Execute☆47Jan 13, 2025Updated last year
- Talk presented at Offensivecon 2025 by Richard Abou Chaya and John Stephenson☆21Jun 12, 2025Updated last year
- Serverless GPU API endpoints on Runpod - Get Bonus Credits • AdSkip the infrastructure headaches. Auto-scaling, pay-as-you-go, no-ops approach lets you focus on innovating your application.
- Analysis of CVE-2025-43529 (WebKit UAF) + CVE-2025-14174 (ANGLE OOB) exploit chain - iOS Safari☆114Aug 27, 2026Updated 2 months ago
- Repo for talk slides & materials☆21Nov 22, 2024Updated last year
- Exact-build Chrome M150 V8/JSPI sandbox escape PoC used to recover a Google v8CTF flag☆16Aug 26, 2026Updated 2 months ago
- my try at recreating and exploiting some v8 CVEs☆22Oct 3, 2025Updated last year
- IOGPUFamily bitmap_mask underflow → kernel heap OOB write. First public PoC. Original discovery by Wang Yu of Cyberserval.☆23Mar 18, 2026Updated 7 months ago
- ☆136Feb 18, 2026Updated 8 months ago
- LIPiKs is a modern React dashboard for data analytics and finance, built with Vite, React, Bun, and Tailwind CSS. Monitor your data analy…☆18Jun 23, 2025Updated last year
- ☆64Aug 15, 2023Updated 3 years ago
- Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.☆105Feb 12, 2025Updated last year
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- ☆293Aug 2, 2025Updated last year
- V8sandbox_bypass using stack misalignment☆24Aug 25, 2024Updated 2 years ago
- Blocking Windows EDR agents by registering an own IPC-object in the Object Manager’s namespace (CVE-2023-3280, CVE-2024-5909, CVE-2024-20…☆36Feb 27, 2025Updated last year
- A V8 Sandbox Escape Technique.☆37Jul 4, 2024Updated 2 years ago
- A bunch of V8 resources (with a security focus)☆147Oct 26, 2026Updated last week
- LPE due to integer truncation in vskrnlintvsp.sys☆23May 5, 2026Updated 5 months ago
- Research artifacts for "DirtyFree: Simplified Data-Oriented Programming in the Linux Kernel" (NDSS 2026)☆31Mar 4, 2026Updated 7 months ago