Revisiting JavaScriptCore Internals: boxed vs. unboxed

Part 6: There are still many things I haven't explained yet. So in this video we go over the boxed vs. unboxed values, how to convert Integer addresses to Doubles and why our bug is a memory corruption.

-=[ 🕴️Advertisement ]=-

-=[ 🔴 Stuff I use ]=-

-=[ ❤️ Support ]=-

-=[ 🐕 Social ]=-

-=[ 📄 P.S. ]=-

All links with "*" are affiliate links.
LiveOverflow / Security Flag GmbH is part of the Amazon Affiliate Partner Programm.

[samfoxman]

ArrayBuffers are not only to help security researchers. For example, an online game using a binary websocket protocol would need to decode bytes to floats for the position of players, or health of enemies, etc.

[Zack-Strife]

Too bad that this might be the last live overflow video

[SourceDanich]

Guys, if you don't understand something it isn't your fault or LiveOverflow being too comlex. It just means you learning something, just rewatch the part you didn't understand before you'll get it. Sure, this series isn't so easy, but if you watch carefully everything you will learn something anyway. Just don't give up but instead check some other videos dedicated to this subject on this or other channels. GL HF!

[dWHOHWb]

JS typed arrays only exist for making exploitation easier? And here I thought they were a webGL thing

[rubenpetrucza]

Thoughts about the steam game called "hacknet"? Would you recommend such game for a newbie who wants to dig into programming/hacking? I'm already hooked on the subject, and I havent really figured out where to start my progress. Good content & keep up<3

[secureitmania]

can you make a video on Bluetooth communication sniffing? The methodology of Bluetooth packets inspection and requirement and lab setup for Bluetooth sniffing.

[alpo]

So that's how you corrupt memory to access arbitrary adresses with this exploit! Can this exploit be used to corrupt browser's memory to gain uXSS powers? Or is the javascript thread still isolated to a single web page

[dangeredwolf]

I'm not the only one that keeps hearing N64 instead of int64, right?

[patrickstival]

I can understand 40% of this video only

[sharkbeats]

Just heard the news YT is banning instructional hacking channels like wtf

[paprika]

Yeah, I haven't understood a single video in this series, but I'm sure one day I will

[realityveil]

So, this video in a nutshell.

The last thing wasn't a memory corruption because it wasn't.
But when you corrupt the memory it becomes a memory corruption.
Thrilling.

[ebvsfvl]

its encode by utf-8 problem in running This Program Can not Be Run in DOS Mode That message is from the basic header that every Windows (PE format) executable has. The message (and the code that displays it) is technically editable, but all compilers seem to just emit code that displays that same string and then exits. It's 16-bit executable code (like a DOS .COM file), intended to be displayed when you try to run the program on MS-DOS or similar pre-Windows systems. Windows' program loader typically skips over it.