
PoC
Curated proof-of-concept exploits for real-world CVEs affecting iOS, macOS, Chrome Renderer, and Steam clients, with version-specific targets and…

Curated proof-of-concept exploits for real-world CVEs affecting iOS, macOS, Chrome Renderer, and Steam clients, with version-specific targets and…

CTF Cheat Sheet + Writeups / Files for some of the Security CTFs that I've done

my exp for chrome V8 CVE-2021-30551

Exploit for Chrome V8 CVE-2018-6065, a type confusion vulnerability, with build instructions and analysis blog post for educational research.

Google Chrome CVE-2026-6307 PoC

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome integer overflow -> OOB write vulnerability I reported to Google in Skia.

PoC for a Chrome SKSL bypass + integer overflow -> OOB write vulnerability I reported to Google in Skia.

Chrome V8 exploit for CVE-2019-5825 targeting version 73.0.3683.86 with --no-sandbox. Includes proof-of-concept code and integration with Metasploit…

Proof-of-concept exploit for CVE-2023-3079, a Chrome V8 type confusion vulnerability, with curated writeups and root cause analysis resources.

Exploit for CVE-2024-5274, a Chrome V8 DCHECK bytecode mismatch vulnerability that provides out-of-bounds read/write primitives for browser…

Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability. Demonstrates exploitation via d8 shell with a malicious…

Exploit for CVE-2023-4427 targeting Chrome 117 V8, using many cross-origin iframes to brute-force ASLR and achieve code execution. Provides…

Proof-of-concept exploit for CVE-2026-85046 in Chrome 152.0.7977.75, demonstrating type confusion in sort() to achieve arbitrary code execution via a…

Proof-of-concept exploit for CVE-2021-38001, a Chrome V8 JavaScript engine vulnerability, demonstrating remote code execution via crafted .mjs files.

Proof-of-concept exploit for CVE-2021-21220, a Chrome V8 vulnerability, with references to technical analysis and exploitation details.

Detailed proof-of-concept and technical analysis for CVE-2026-2441, a Chrome CSS use-after-free vulnerability enabling sandboxed renderer RCE via…