
Browser-Pwning-
A proper well structured documentation for getting started with chrome pwning & v8 pwning

A proper well structured documentation for getting started with chrome pwning & v8 pwning

Google Chrome CVE-2026-6307 PoC

Root-cause analysis and working exploit for CVE-2026-78938, a V8 TurboFan type confusion leading to arbitrary read/write within the compressed heap.…

Chrome 152 V8 exploit chaining CVE-2026-85046 and CVE-2026-87491 to corrupt the heap, forge Wasm metadata, and execute native code from the renderer.

Detailed proof-of-concept and technical analysis for CVE-2026-2441, a Chrome CSS use-after-free vulnerability enabling sandboxed renderer RCE via…

Proof-of-concept trigger for CVE-2026-85045, a Chrome V8 Maglev deoptimization bug causing incorrect array output on vulnerable builds.

Integer overflow in FreeType software, which also affects Chrome

Reproducer and technical analysis for CVE-2026-85048, a Chrome viz surface use-after-free in the GPU process, with ASAN unit tests and browser…

A PoC to trigger CVE-2023-5217 from the Browser WebCodecs or MediaRecorder interface.

Proof-of-concept exploit for CVE-2026-85046 in Chrome 152.0.7977.75, demonstrating type confusion in sort() to achieve arbitrary code execution via a…

Chrome Renderer 1day RCE via Type Confusion in Async Stack Trace (v8ctf submission)

POC available soon

Curated proof-of-concept exploits for real-world CVEs affecting iOS, macOS, Chrome Renderer, and Steam clients, with version-specific targets and…

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

CVE-2024-0519 root cause analysis

A collection of web browser CTF challenges and solutions.

This project is a research-oriented and educational simulation designed to demonstrate the concept of a sandbox escape vulnerability within Google…

Full-chain RCE exploit for CVE-2025-2783, a Chromium Ipcz sandbox escape vulnerability. Implements thread hijacking, V8 hooks, and shellcode…