There's a bunch of misinformation about the new Firefox exploit so I'd like to clear a few things up. https://twitter.com/movrcx/status/803744059022069760 …
This Tweet is unavailable.
-
This is not an advanced exploit. If you want to see one of those, check out Pegasus which had to deal with code signing and JIT pages.
This type of exploit is much harder to write in Chrome and Edge due to memory partitioning, an exploit mitigation that Firefox lacks.
-
-
If you thought this exploit was from MSF, it's not. MSF has 8 Firefox exploits, none of them match this new one.
-
The version regex in the exploit matches Firefox 49, and the specific user-agent that the Tor Browser Bundle uses.pic.twitter.com/OjMf6T4JHA
- 8 more replies
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.