Security research writeups
☆19Nov 8, 2026Updated this week
Alternatives and similar repositories for publications
Users that are interested in publications are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- docs/notes/writeups about CTF pwning☆12Oct 8, 2025Updated last year
- Tool to keep Track of Chromium Releases with automatic Commit detection for V8 bugs☆16Dec 4, 2025Updated 11 months ago
- A collection of in-depth studies authored by me on JavaScript engine vulnerabilities.☆51Feb 6, 2026Updated 9 months ago
- ☆45Oct 10, 2025Updated last year
- Exact-build Chrome M150 V8/JSPI sandbox escape PoC used to recover a Google v8CTF flag☆17Aug 26, 2026Updated 2 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- ☆12Jun 4, 2026Updated 5 months ago
- ☆19May 29, 2026Updated 5 months ago
- A in-the-wild V8 type confusion bug.☆32Aug 8, 2025Updated last year
- ☆31Nov 25, 2025Updated 11 months ago
- ☆17Jan 31, 2023Updated 3 years ago
- PatchFuzz: Fuzzing for JavaScript Engine Incomplete Security Patches☆24Dec 17, 2025Updated 10 months ago
- An uninitialized read vulnerability by incorrect Turboshaft Store-Store Elimination in V8.☆30Jan 29, 2026Updated 9 months ago
- CVE-2024-8381: A SpiderMonkey Interpreter Type Confusion Bug.☆15Feb 12, 2025Updated last year
- ☆40Jun 4, 2026Updated 5 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆66Jul 2, 2026Updated 4 months ago
- ☆81May 15, 2026Updated 5 months ago
- Talk presented at Offensivecon 2025 by Richard Abou Chaya and John Stephenson☆21Jun 12, 2025Updated last year
- ☆95Aug 26, 2025Updated last year
- WebGL fuzzer☆39Mar 13, 2023Updated 3 years ago
- Some V8 n-day exploits that I've written☆64Oct 31, 2026Updated last week
- ☆26May 12, 2026Updated 5 months ago
- This is a write up of the exploit I developed for the Pwn2Own Automotive 2026 competition.☆35Updated this week
- ☆32May 20, 2026Updated 5 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Independent discovery & coordinated disclosure: CoreMedia bytestream XPC (mediaplaybackd) vended live file descriptors for protected path…☆24Oct 28, 2026Updated 2 weeks ago
- Heap OOB write in MariaDB JSON_SCHEMA_VALID() → persistent privilege escalation (lab-assisted)☆16May 6, 2026Updated 6 months ago
- Defensive Patch Tuesday semantic diff CLI for Windows build snapshots and security-focused patch analysis.☆44Jun 17, 2026Updated 4 months ago
- Full Chain Analysis of CVE-2022-4262, a non-trivial feedback slot type confusion in V8.☆105Feb 12, 2025Updated last year
- Proof of concept for CVE-2026-43786, a local privilege escalation vulnerability in macOS CoreServices that allows an application to gain …☆31Sep 21, 2026Updated last month
- Integer overflow in FreeType software, which also affects Chrome☆31Jul 14, 2026Updated 3 months ago
- ☆37Apr 14, 2025Updated last year
- My browser pwn collections. Mainly JavaScript engine stuff.☆36Mar 12, 2026Updated 8 months ago
- Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)☆88Jun 3, 2024Updated 2 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Model Context Protocol (MCP) server that gives AI agents live, stateful Windows RPC attack-surface research, built on James Forshaw's N…☆16Sep 30, 2026Updated last month
- ☆12Jun 27, 2025Updated last year
- all design materials related with evilfactory☆12Apr 29, 2019Updated 7 years ago
- Technical disclosure and PoC for CVE-2026-84543, a macOS SMB kernel vulnerability☆41Sep 24, 2026Updated last month
- V8 Tutorial PLDI 2019☆76Jul 23, 2019Updated 7 years ago
- ☆86Aug 30, 2024Updated 2 years ago
- Chrome V8 exploit guide for starter from build to exploit in Korean. If This has incorrect information, Please let me know, Chrome V8 Ex…☆168Apr 13, 2019Updated 7 years ago
Are these results useful?