Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2018-17463 — Working Proof of Concept Exploit for CVE-2018-17463 | Kitploit
Tools/GitHubGitHub/jhalon/cve-2018-17463
ExploitationShellcodeWeb Application ExploitationLearning & EducationPayload Development
GitHubjhalon/cve-2018-17463

CVE-2018-17463

Working Proof of Concept Exploit for CVE-2018-17463

View Repository
1133 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2018-17463

Working Proof of Concept Exploit for CVE-2018-17463 utilzing WebAssembly RWX Pages for Shellcode execution.

CVE-2018-17463 stemmed from the incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

This Proof of Concept is directly related to the following blog posts:

  • Chrome Browser Exploitation, Part 1: Introduction to V8 and JavaScript Internals
  • Chrome Browser Exploitation, Part 2: Introduction to Ignition, Sparkplug and JIT Compilation via TurboFan
  • Chrome Browser Exploitation, Part 3: Analyzing and Exploiting CVE-2018-17463

The original writeup for this bug was presented in Phrack: Exploiting Logic Bugs in JavaScript JIT Engines by Samuel Gross.

All credits to finding the bug and writing the initial proof of concept go to Samuel Gross.

Download Tool