Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ReadDaily-2024 #88

Open
xinali opened this issue Jan 16, 2024 · 0 comments
Open

ReadDaily-2024 #88

xinali opened this issue Jan 16, 2024 · 0 comments

Comments

@xinali
Copy link
Owner

xinali commented Jan 16, 2024

2024

0x01

20240111

阅读文章:https://mathiasbynens.be/notes/shapes-ics

文章主要介绍了在javascript引擎中javascript object内存存储模型,shape结构,shape链

image

JSArray内存存储结构

image

以及部分编译器优化的知识,有助于对于v8的整体理解

20240112

阅读文章:https://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/

文章主要是使用pin来做污点分析,在做漏洞挖掘的过程中,对于输入的数据进行污点分析,主要涉及到的是数据流跟踪,UAF漏洞,指针引用检查等。其实对我来说,最主要的功能在于数据流跟踪,对于一些文件解析的漏洞,通过跟踪文件输入的数据流,可以方便定位到涉及的数据解析模块。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant