There's a bunch of misinformation about the new Firefox exploit so I'd like to clear a few things up. https://twitter.com/movrcx/status/803744059022069760 …
This Tweet is unavailable.
-
The controlled object eventually gives them RW access to memory, then its game over.
This is not an advanced exploit. If you want to see one of those, check out Pegasus which had to deal with code signing and JIT pages.
-
-
This type of exploit is much harder to write in Chrome and Edge due to memory partitioning, an exploit mitigation that Firefox lacks.
-
If you thought this exploit was from MSF, it's not. MSF has 8 Firefox exploits, none of them match this new one.
- 9 more replies
New conversation -
-
-
I think it's important to note this is relative. Not cutting edge for browser payloads, but heap sprays aren't entry level stuff.
-
Actual bug is pretty boring though and exploiting in other browsers would take a lot more work and other bugs.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.