We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
阅读文章:https://mathiasbynens.be/notes/shapes-ics
文章主要介绍了在javascript引擎中javascript object内存存储模型,shape结构,shape链
JSArray内存存储结构
以及部分编译器优化的知识,有助于对于v8的整体理解
阅读文章:https://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/
文章主要是使用pin来做污点分析,在做漏洞挖掘的过程中,对于输入的数据进行污点分析,主要涉及到的是数据流跟踪,UAF漏洞,指针引用检查等。其实对我来说,最主要的功能在于数据流跟踪,对于一些文件解析的漏洞,通过跟踪文件输入的数据流,可以方便定位到涉及的数据解析模块。
The text was updated successfully, but these errors were encountered:
No branches or pull requests
2024
0x01
20240111
阅读文章:https://mathiasbynens.be/notes/shapes-ics
文章主要介绍了在javascript引擎中javascript object内存存储模型,shape结构,shape链
JSArray内存存储结构
以及部分编译器优化的知识,有助于对于v8的整体理解
20240112
阅读文章:https://shell-storm.org/blog/Taint-analysis-and-pattern-matching-with-Pin/
文章主要是使用pin来做污点分析,在做漏洞挖掘的过程中,对于输入的数据进行污点分析,主要涉及到的是数据流跟踪,UAF漏洞,指针引用检查等。其实对我来说,最主要的功能在于数据流跟踪,对于一些文件解析的漏洞,通过跟踪文件输入的数据流,可以方便定位到涉及的数据解析模块。
The text was updated successfully, but these errors were encountered: