Tip, pick any electron app out there and write an exploit fo it and you will learn a lot.
Stuff I learned while doing this
- v8 inline cache
- a bit of v8 new heap sandbox implementation
- a bit of v8 regexp bytecode interpreter
- ROP chain in MacOS ARM64(kinda complicated than x86)
- ROP chain in Windows x64
- using windbg, lldb, radare2, ROPgadget
Let's gooooooo!!!!!!!! Had to rewrite on Windows.
That cost me 100 hours of my life😅.