#JavaScriptCore

New write-up with @GenericCoding on pois0nSword, our iOS 26.1 port of DarkSword: bypassing PAC to reach arbitrary native calls from a WebKit renderer R/W, by making dyld's own loader do the write. #WebKit #JavaScriptCore #iOS #exploitdev

Been exploring WebKit/JSC exploitation and wrote up a step-by-step walkthrough - from a caged OOB bug to cage-free arbitrary R/W with diagrams + a lab you can build. #WebKit #JavaScriptCore #BrowserExploitation #exploitdev #pwn

One of our favorite #debugging technologies comes from @mozilla, so this week we wanted to help highlight an amazing project. Part three of our #Pwn2Own series makes use of timeless debugging to root cause an exploitable race condition in #JavaScriptCore:

Vulnerability weaponization is the most frequently discussed topic of the #exploit development lifecycle. Here's our take on weaponizing a #JavaScriptCore vulnerability from the ground up: #Pwn2Own part four

Safari, Hold Still for NaN Minutes @sherl0ck__ @n30m1nd @XI_Research #VulnerabilityAnalysis #JavaScriptCore #ASLR #Safari

#phrack "Attacking JavaScript Engines: A case study of #JavaScriptCore and #CVE-2016-4622" by @5aelo

اپل #Apple یک پچ امنیتی برای رفع دو آسیب‌پذیری zero-day منتشر کرد که هکرها از آن برای سوءاستفاده از کامپیوترهای مک با چیپ اینتل استفاده می‌کردند. یکی از این آسیب‌پذیری‌ها مربوط به اجرای کد مخرب از طریق #JavaScriptCore و دیگری به حملات #XSS از طریق موتور #WebKit مربوط است. اپل از کاربران خواسته تا سیستم‌عامل خود را فوراً به‌روزرسانی کنند تا از این حملات جلوگیری شود. #Bitcoin

"Speculation in JavaScriptCore" by @filpizlo @webkit => { #js #webkit #javascriptCore }

Don’t we all like to have the flexibility to follow any pattern for naming exported Swift API without limiting us to predefined conventions? Luckily, there is a different way of doing it: #functions #JavaScriptCore #JSExportAs #selectors #Swift #ios

Been testing @panic's upcoming Nova code editor for a while. It has the snappiness of @sublimehq, the thoughtful details of @macromates's #textmate. The power of #JavaScriptCore, and the flexibility of @Microsoft's Language Server Protocol should bring it close to @code.

🚀"Bun speeds things up by utilizing the JavaScriptCore engine, while Node.js relies on the JavaScript V8 engine. JavaScriptCore is optimized for quicker startup, making Bun a great choice for faster performance. 💨 #NodeJS #JavaScriptCore #Bun #100daysofcoding"

REMIND/TONITE (1900 CET ONLINE @ #Zoom), @ctietze: "Make your app extensible with #JavaScriptCore"!

.@filpizlo on “Polymorphic Inline Caching in #JavaScriptCore“ at @ICOOOLPS. #ecoop18

WebAssembly: Wasmer 3.3 bringt Unterstützung von JavaScriptCore #Backend #JavaScriptCore

react-native-js-benchmark week 2 - TTI Looks like no much difference between JIT and no-JIT versions. And V8 acts better than JSC this time. For details, it is in #reactnative #v8 #javascriptcore

It's kind of cool to read the #JavaScriptCore tests just for the #exotic #JavaScript

The @NativeScript team is working on total revamp of the #iOS runtime. The goal is to use the V8 engine instead of #JavaScriptCore. Several months ago the team shipped an alpha version of this runtime and now it’s time to announce the next iteration.

At @igalia we not only do a lot of feature development on JSC 64bits but also on 32bits (ARMv7 and MIPSel). Here's a brief tour of the implementation of the for-of intrinsic for JSC 32bit that landed a few months ago: #webkit #javascriptcore #javascript

Interesting article - Is Bun.js the Node.js killer? #v8 #JavaScriptCore #bun #nodeJS #JavaScript #webdevelopment #webdev

The #NativeScript team is working on total revamp of the #iOS runtime. The goal is to use the V8 engine instead of #JavaScriptCore. Several months ago the team shipped an alpha version of this runtime and now it’s time to announce the next iteration.