blazefox

by 0vercl0k

0vercl0k /blazefox

Blazefox exploits for Windows 10 RS5 64-bit.

133 Stars 50 Forks Last release: 10 months ago (1) MIT License 32 Commits 1 Releases

Available items

No Items, yet!

The developer of this repository has not created any items for sale yet. Need a bug fixed? Help with integration? A different license? Create a request here:

Blazefox exploits for Windows 10 RS5 64-bit

This the repository associated with the article Introduction to SpiderMonkey exploitation.

Overview

Blazefox
is an exploitation challenge written by itszn for Blaze CTF 2018. The author added a
blaze
method to JavaScript Arrays that sets the size of the backing buffer to 420. This gives the attacker an out-of-bounds memory primitive.

ifrit.js

Organization

  • Three exploits are documented and available in exploits,
  • A WindDbg JavaScript extension that allows to dump
    js::Value
    and
    JSObject
    objects in sm,
  • Various scripts built during the research in scripts,
  • An x64 debug build of the JavaScript shell (along private symbol information) in js-asserts, and an x64 release build in js-release,
  • The sources matching js-release private symbol information in src/js,
  • Last but not least, 7z archives of the Firefox binaries (along with
    xul.dll
    private symbol information) I compiled for Windows 64-bit in ff-bin.7z.

We use cookies. If you continue to browse the site, you agree to the use of cookies. For more information on our use of cookies please see our Privacy Policy.