awesome browser security

Exploit

• Attacking JavaScript Engines in 2022

Experience

• Bug bounty hunter to working at Microsoft

JavaScriptCore

Fundanmental

• Speculation in JavaScriptCore--slide
• A New Bytecode Format for JavaScriptCore--slide
• Profiling in JavaScriptCore
• JavaScriptCore Internals Part I: Tracing JavaScript Source to Bytecode
• JavaScriptCore Internals Part II: The LLInt and Baseline JIT
• JavaScriptCore Internals Part III: The DFG (Data Flow Graph) JIT – Graph Building
• JavaScriptCore Internals Part IV: The DFG (Data Flow Graph) JIT – Graph Optimisation
• JavaScriptCore Internals Part V: The DFG (Data Flow Graph) JIT – On Stack Replacement

ChakraCore

Fundanmental

• Exploit Development: Browser Exploitation on Windows - CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 1)

• Exploit Development: Browser Exploitation on Windows - CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 2)

• Exploit Development: Browser Exploitation on Windows - CVE-2019-0567, A Microsoft Edge Type Confusion Vulnerability (Part 3)