A list of topics to get into browser exploitation
- Browsers
- Browser Architecturre
- Javascript
- Interfacing with DOM
- JS + DOM
- Javascript
- JS internals
- V8 Objects
- JSC Objects
- Garbage Collection
- Vulnerabilities
- JS JIT compiler
- JIT Debugging
- JIT optimizations and typing
- Inline Caching/Speculative Typing
- Speculative optimizations
- JS Exploitation
- Layering Exploit Primitives
- Achieving Arbitrary Memory Read/Write
- JIT overwrite and arbitrary code execution
- Browser Mitigations
- Browser Architecture
- Web Standards
- W3C
- WHATWG
- ECMA
- WebIDL
- Safari
- SVN
- Webcore
- JSCore
- Chrome
- V8
- OmahaProxy
- DepotTools
- WebKit