CVE-2017-2446 or JSC::JSGlobalObject::isHavingABadTime.
Introduction
This post will cover the development of an exploit for JavaScriptCore (JSC) from the perspective of someone with no background in browser exploitation.
Around the start of the year, I was pretty burnt out on CTF problems and was interested in writing an exploit for something more complicated and …
more ...