
SkeletonKey
CVE-2026-6765, Test only FormAutofill handlers exposed in Firefox

CVE-2026-6765, Test only FormAutofill handlers exposed in Firefox

Hands-on lab for CVE-2024-4367, demonstrating PDF.js font rendering vulnerability exploitation in Firefox. Includes PoC generator, vulnerable and…

Proof-of-concept for CVE-2021-43530, a Universal XSS vulnerability in Firefox for Android caused by improper URL sanitization when processing QR code…

CVE-2018-12386 - Firefox Sandboxed RCE Exploit for Linux (Firefox <v62.0.3)

CVE-2018-12386 - Firefox Sandboxed RCE Exploit for Linux (Firefox <v62.0.3)

PoC for CVE-2020-16012, a timing side channel in drawImage in Firefox & Chrome

A collection of web browser CTF challenges and solutions.

Proof-of-concept demonstrating a Use-After-Free vulnerability in Firefox's RTCEncodedFrameBase via WebRTC Encoded Transforms, enabling heap…