seen from Malaysia
seen from Canada
seen from China
seen from Italy
seen from Slovakia
seen from Yemen
seen from Malaysia
seen from Türkiye
seen from Malaysia
seen from United Kingdom
seen from Russia
seen from Finland
seen from Australia
seen from Czechia
seen from Colombia
seen from Netherlands
seen from Italy
seen from United States
seen from Colombia
seen from Germany
#4C17Â Inaugural SIG on the Writing and Rhetorics of Code (SIGWROC)
Sign up to attend or for the future newsletter
For any interested parties out there, feel free to sign up (outbound Google Doc link) to attend the inaugural SIGWROC meeting at the 4Cs conference this coming March 2017. If you cannot attend, feel free to also leave your name and email address and mark that you would like to receive the future SIGWROC newsletter.
Please share widely!
"Heap Feng Shui in JavaScript"
Excerpts from Alexander Sotirov's (2007) Black Hat presentation on "Heap Feng Shui in JavaScript."
What is heap feng shui?
the ancient art of arranging heap blocks in order to redirect the program control flow to the shellcode
What is heap feng shui in JavaScript?
precise application data overwrites
reliable browser exploitation
The art of heap feng shui in the wild: "Microsoft discloses zero day in all versions of Internet Explorer," which affects IE 9-11, relying on Flash.
See Sotirov's paper and source for his HeapLib.js
