browser-exploitation-v8 — Skills

What it does

sandbox-escape-techniques — Chrome renderer sandbox escape via IPC/Mojo

heap-exploitation — general heap concepts applicable to V8 heap

stack-overflow-and-rop — ROP concepts for native code execution after V8 escape

binary-protection-bypass — ASLR/NX bypass in browser context

Detailed exploitation patterns and code templates

Heap layout manipulation and GC interaction

V8 sandbox bypass techniques

Requirements & configuration

Load V8EXPLOITATIONPATTERNS.md when you need:

// Setup depends on specific bug

Need sandbox escape to get full process memory access

After renderer RCE (via V8 exploit), the process is still sandboxed. Full compromise requires:

│ │ ├── Need sandbox escape: external pointer table corruption,

Configuration: PACKED_SMI_ELEMENTSPACKED_DOUBLE_ELEMENTSPACKED_ELEMENTS

browser exploitation v8

Source

Repository: https://github.com/yaklang/hack-skills

browser-exploitation-v8 FAQ

What does the browser-exploitation-v8 skill do?

>- Browser and V8 exploitation playbook. Use when exploiting JavaScript engine vulnerabilities including JIT type confusion, incorrect bounds elimination, and V8 sandbox bypass to achieve renderer RCE and sandbox escape in Chrome/Chromium. sandbox-escape-techniques — Chrome renderer sandbox escape via IPC/Mojo heap-exploitation — general heap concepts applicable to V8 heap

What does browser-exploitation-v8 require?

Load V8EXPLOITATIONPATTERNS.md when you need: // Setup depends on specific bug Need sandbox escape to get full process memory access After renderer RCE (via V8 exploit), the process is still sandboxed. Full compromise requires: │ │ ├── Need sandbox escape: external pointer table corruption, Configuration keys: PACKED_SMI_ELEMENTS, PACKED_DOUBLE_ELEMENTS, PACKED_ELEMENTS.

How do I install browser-exploitation-v8?

Run: npx -y skills add https://github.com/yaklang/hack-skills --skill browser-exploitation-v8 --agent claude-code — the source lives at github.com/yaklang/hack-skills.

Maintain browser-exploitation-v8?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[browser-exploitation-v8 on getagentictools](https://getagentictools.com/skills/yaklang-hack-skills-browser-exploitation-v8?ref=badge)

npx agentictools info skills/yaklang-hack-skills-browser-exploitation-v8

The second line is the CLI lookup for this page — handy in READMEs and docs.