• Home
    • People
    • Projects
    • Publications
    • Teaching
    • CVEs
    • Visiting
    • About
    • Blog
    • Archives

    Hack The Real: An exploitation chain to break the Safari browser

    Exploiting type confusion bugs in latest JSC and escaping the sandbox

    more ...

    Analysis of CVE-2018-1000657: OOB write in Rust's VecDeque::reserve()

    A bug in VecDeque::reserve() of Rust's standard library allowed out-of-bound write in heap region.

    more ...

    Exploiting TurboFan Through Bounds Check Elimination

    Exploiting TurboFan Through Bounds Check Elimination

    more ...

    Analysis of a use-after-unmap vulnerability in Edge: CVE-2019-0609

    An analysis of an interesting vulnerability in Microsoft Edge

    more ...

    Integer Overflow Vulnerabilities in Language Interpreters

    Exploiting four integer overflow vulnerabilities in Python and PHP

    more ...

    Tricks to Reassemble Disassembly

    A few tricks to produce relocatable, reassemblable disassembly

    more ...

    Dangling Pointers Nullification to Prevent Use-after-free

    Nullify dangling pointers to stop use-after-free.

    more ...

    Security Evaluation for ARC

    Security issues caused by permission mismatch and inter-"component" interaction in ARC

    more ...

    • Association

      • School of Cybersecurity and Privacy
      • School of Computer Science
      • College of Computing
      • Georgia Tech
    • Projects

      • GitHub
    • Blog Tags

    • @SSLab_Gatech


    School of Computer Science · College of Computing · Georgia Tech

    Back to top