Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

YouTube

Browser Hacking With ANGLE

Hack In The Box Security Conference via YouTube

Start learning Write review
Scrimba Ad

Free courses from frontend to fullstack and AI

Learn More → Corporate Finance Institute Ad

Learn Excel and Financial Modeling the Way Finance Teams Actually Use Them

Learn More →

Overview

Google, IBM & Meta Certificates – 40% Off
One Coursera Plus subscription covers most Professional Certificates on Coursera.
Unlock All Certificates
This presentation introduces ANGLE and its role in browser WebGL/WebGL2, then analyzes exploitable Chromium and Safari vulnerabilities. It demonstrates exploitation steps leading to macOS remote code execution, without covering the iOS PAC bypass.

Syllabus

Intro
Background of ANGLE
ANGLE Architecture Overview
WebGL Implementation
Chrome texStorage3D Out of Bound Read
Safari MultiDrawArrays Heap overflow
Safari Transform Feedback Use After Free
Allocate Buffer Object
Exploitation Steps
JSC's Butterfly Overview
Step 1: Heap Spray
Trigger the Bug
Search Corrupted JSArray
Get JSCell and Structure ID
Get addrof/fakeobj primitives

Taught by

Hack In The Box Security Conference

Reviews

Start your review of Browser Hacking With ANGLE

Start learning

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Sign up for free
Someone learning on their laptop while sitting on the floor.