Authors
Brendan Dolan-Gavitt

Brendan Dolan-Gavitt

Distinguished Engineer and AI Researcher
LinkedInGitHubX
Published

Published by Brendan Dolan-Gavitt

1 entry
Research01/01

Zero to Calc in Six Days: Inside XBOW’s Chrome Full Chain

Brendan Dolan-GavittbyB. Dolan-GavittThe final chain combined a V8 compiler bug, an animated-WebP decoder bug, and a memory-safety bug in Crashpad. Together they turned JavaScript execution in an ordinary Chrome tab into code execution outside the renderer sandbox.
From the XBOW blog

Posts by Brendan Dolan-Gavitt on the XBOW blog

1 post
  1. Security Research

    Breaking Crypto with XBOW

    XBOW built a padding oracle exploit to decrypt a server cookie and bypass authentication in a novel benchmark, outperforming expectations from advanced cryptography training.