Our Blog

From 500 to Account Takeover

Reading time: ~10 min

Posted by Bram Ruttens on 02 March 2021

Categories: Account takeover, Javascript, Xss, Chain

Introduction What seemed like a regular Cross-site Scripting (XSS) vulnerability on an HTTP 500 “Internal Server Error”-page, I managed to...

Browser
Browsers
Chrome
Exploit development
Exploitation
Javascript
Reverse engineering
V8

Reading time: ~15 min

Posted by Javier Jimenez on 28 February 2020

Categories: Browser, Browsers, Chrome, Exploit development, Exploitation, Javascript, Reverse engineering, V8

Intro Last Christmas I was doing quite a bit of research around an exploit for Chrome’s JavaScript engine, V8. While...