101 Chrome Exploitation — Part 0 Preface

[carlospolop]

🤖 Automated Content Update

This PR was automatically generated by the HackTricks News Bot based on a technical blog post.

📝 Source Information

• Blog URL: https://opzero.ru/en/press/101-chrome-exploitation-part-0-preface/
• Blog Title: 101 Chrome Exploitation — Part 0: Preface
• Suggested Section: generic-hacking/browser-exploitation

🎯 Content Summary

101 Chrome Exploitation — Part 0: Preface

Introduces a complete full-chain exploit on Chrome 130, covering browser architecture, defense-in-depth, and multi-stage attack development.

Topics Explained

• Chrome’s multi-process model: renderer, V8 internal sandbox, browser/main, GPU.
• OS sandbox layers: Windows integrity levels, Linux seccomp-bpf, macOS profiles.

Architecture Diagram

+----...
🔧 Technical Details
WebAssembly type confusion exploit (CVE-2025-0291): Type misclassification in V8’s Turboshaft compiler causes WasmGC reference types to be treated incorrectly in single-block loops, allowing crafted WebAssembly modules to produce addrOf and fakeObj primitives for arbitrary read/write within the V8 heap. 🎁 PoC
V8 internal sandbox bypass via Tuple2 corruption (Issue 379140430): Signature mismatch during WebAssembly-to-JavaScript wrapper tier-up optimization corr...
🤖 Agent Actions
The repository lacked any dedicated content about modern Chrome exploitation.

A new technical guide has been added:
• src/binary-exploitation/chrome-exploiting.md – covers architecture, sandbox layers, and the three-stage full-chain (WebAssembly type confusion → V8 sandbox escape → Mojo OS sandbox escape) with PoC snippets and practical notes.
No existing pages required modification as this fills a new gap in the binary-exploitation section.
✅ Review Checklist

 Content is technically accurate
 Formatting follows HackTricks style guidelines
 Links and references are working
 Content adds educational value
 No sensitive information is exposed


This PR was automatically created by the HackTricks Feed Bot. Please review the changes carefully before merging.
📚 Repository Maintenance

MD files processed: 857
MD files fixed: 1

All .md files have been checked for proper formatting (headers, includes, etc.).

[carlospolop]

🔗 Additional Context

Original Blog Post: https://opzero.ru/en/press/101-chrome-exploitation-part-0-preface/

Content Categories: Based on the analysis, this content was categorized under "generic-hacking/browser-exploitation".

Repository Maintenance:

• MD Files Formatting: 857 files processed (1 files fixed)

Review Notes:

• This content was automatically processed and may require human review for accuracy
• Check that the placement within the repository structure is appropriate
• Verify that all technical details are correct and up-to-date
• All .md files have been checked for proper formatting (headers, includes, etc.)

Bot Version: HackTricks News Bot v1.0

[carlospolop]

merge