I have written POC and brief explanation for CVE-2023-41993 WebKit JSC bug fixed at iOS 17.0.1.
commit: 66ffc7ca6a7c833c5720eb71b427784
advisory: support.apple.com/en-us/HT213926
exploit: github.com/po6ix/POC-for-…
- Vulnerablity explanation about prototype pollution in real world 🙂 blog.p6.is/Real-World-JS-…
- Introduce the new usage of prototype pollution. blog.p6.is/AST-Injection/
- How Pragyan CTF 2020 Hacked. blog.rwx.kr/how-pragyan-ct…
- My further research will be published at POC2020 powerofcommunity.net/speaker_main.h…
- We've won in SECCON 2020 (Team HangulSarang) I worked with all web challenges *Writeups gist.github.com/po6ix/4af76691…
- CVE numbers for last years research (NodeJS Automation Analysis) has been assigned :p
- Today, I left my first CTF team defenit and I'm looking for a new team that needs web CTF player. If you're interested in, DM me. Thank you. *resume : p6.is *blog : blog.p6.is
- 2021 Hayyim Security CTF Writeups includes Cyberchef 0-day XSS Vuln. blog.p6.is/writeups-for-h…
