CVE-2017-2446 or JSC::JSGlobalObject::isHavingABadTime.
Introduction
This post will cover the development of an exploit for JavaScriptCore (JSC) from the perspective of someone with no background in browser exploitation.
Around the start of the year, I was pretty burnt out on CTF problems and was interested in writing an exploit for something more complicated and …
more ...happy unikernels
Intro
Below is a collection of notes regarding unikernels. I had originally prepared this stuff to submit to EkoParty’s CFP, but ended up not wanting to devote time to stabilizing PHP7’s heap structures and I lost interest in the rest of the project before it was complete. However …
more ...