domato

Domato 🍅 一个 DOM 模糊测试器 由 Ivan Fratric 编写和维护，[email protected] 版权所有 2017 Google Inc. 保留所有权利。 根据 Apache 许可证 2.0 版（“许可证”）获得许可； 除非遵守许可证，否则您不得使用此文件。 您可以在以下位置获取许可证副本： root@kitploit: http://www.apache.org/licenses/LICENSE-2.0 除非适用法律要求或书面同意，否则按“原样”分发软件， 不附带任何明示或暗示的保证或条件。 请参阅许可证，了解管理权限和限制的具体语言。 使用方法...

The Great DOM Fuzz-off of 2017

Posted by Ivan Fratric, Project Zero Introduction Historically, DOM engines have been one of the largest sources of web browser bugs. And while in the recent years the popularity of those kinds of bugs in targeted attacks has somewhat fallen in favor of Flash which allows for cross-browser exploi...

Announcing cross_fuzz, a potential 0-day in circulation, and more

Hi list, == SUMMARY == I am happy to announce the availability of crossfuzz - an amazingly effective but notoriously annoying cross-document DOM binding fuzzer that helped identify about one hundred bugs in all browsers on the market - many of said bugs exploitable - and is still finding more. Th...