stratan

@5tratan

Building products @TashitaSoftSec. Securious research on the side.

Pinned
stratan
@5tratan
May 2
Introducing What The Claude: Browser Edition. A series where we pick apart browser bugs found/reported by Claude. First up: CVE-2026-2796, a SpiderMonkey Wasm import bug that leads to addrof/fakeobj/read-write. github.com/str8outtaheap/…
2
stratan
@5tratan
Aug 8
What The Claude, episode 4. As promised, we chained Bug 2024918 and Bug 2022034 into a full Firefox sandbox escape. The phi gets us in. The NaN gets us out. PhiNaNigans.
publications/research/firefox/bug-2024918-2022034-firefox-sandbox-chain/README.md at main ·...
From github.com
1
stratan
@5tratan
Jul 15
What The Claude, episode 3. We're taking a break from content-process RCEs for Bug 2022034. A raw NaN. Typed JS actor IPC. A parent-process fake object. An XUL leak. Code execution outside the sandbox. NaN around and find out.
publications/research/firefox/bug-2022034-jsipcvalue-nan-boxing/README.md at main · str8outtaheap...
From github.com
1
stratan
@5tratan
May 16
What The Claude: Browser Edition, episode 2. This time: Bug 2024918. A phi node, SpiderMonkey's JIT pipeline, Wasm GC scalar replacement, escape analysis, and one wrong equality check. Let’s dive in.
publications/research/firefox/bug-2024918-wasm-scalar-replace-phi-escape/README.md at main ·...
From github.com
1
stratan
@5tratan
Feb 22, 2019
@rkmylo and I are kicking off our WebKit research debut by pwning CVE-2018-4441. Feedback is much appreciated! melligra.fun/webkit/2019/02…