# blazefox

Published articles for blazefox.

This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles.

## Introduction to SpiderMonkey exploitation.

DevFeed: [Introduction to SpiderMonkey exploitation.](<https://devfeed.tech/articles/introduction-to-spidermonkey-exploitation-39707.md>)

Original publisher: [Read original article](<https://doar-e.github.io/blog/2018/11/19/introduction-to-spidermonkey-exploitation/>)

Author: Axel "0vercl0k" Souchet

Published: 2018-11-19T16:25:00Z

Content type: article

Language: en

Sources: [Diary of a reverse-engineer](<https://devfeed.tech/sources/diary-of-a-reverse-engineer.md>)

Topics: [Exploit](<https://devfeed.tech/topics/exploit.md>), [spidermonkey](<https://devfeed.tech/topics/spidermonkey.md>), [Firefox](<https://devfeed.tech/topics/firefox.md>), [JavaScript](<https://devfeed.tech/topics/javascript.md>), [JIT](<https://devfeed.tech/topics/jit.md>), [Windows](<https://devfeed.tech/topics/windows.md>), [Shell](<https://devfeed.tech/topics/shell.md>), [ctf](<https://devfeed.tech/topics/ctf.md>)

Tags: [blazefox](<https://devfeed.tech/tags/blazefox.md>), [ctf](<https://devfeed.tech/tags/ctf.md>), [exploit](<https://devfeed.tech/tags/exploit.md>), [exploitation](<https://devfeed.tech/tags/exploitation.md>), [firefox](<https://devfeed.tech/tags/firefox.md>), [interpreter](<https://devfeed.tech/tags/interpreter.md>), [javascript](<https://devfeed.tech/tags/javascript.md>), [jit](<https://devfeed.tech/tags/jit.md>), [mozilla](<https://devfeed.tech/tags/mozilla.md>), [payload](<https://devfeed.tech/tags/payload.md>), [spidermonkey](<https://devfeed.tech/tags/spidermonkey.md>), [ttd](<https://devfeed.tech/tags/ttd.md>), [windows](<https://devfeed.tech/tags/windows.md>)

### AI overview

This blog post explains the development of three exploits targeting the SpiderMonkey JavaScript engine and Mozilla Firefox on 64-bit Windows. It progresses from a WinDbg JavaScript extension and a build-specific interpreter exploit to dynamically resolving targets and using the baseline JIT to generate ROP gadgets or native code payloads.

### Source excerpt

Introduction This blogpost covers the development of three exploits targeting SpiderMonkey JavaScript Shell interpreter and Mozilla Firefox on Windows 10 RS5 64-bit from the perspective of somebody that has never written a browser exploit nor looked closely at any JavaScript engine codebase. As you have probably noticed, there has been ...