AppSec Village

LXCL:Grants entry to the workshop.

Classroom Admission

LXCL:As seats become available we will contact you.

Waitlist

As vulnerabilities are discovered and security patches are applied, the structure of the Chrome V8 Engine and its internal sandbox continues to evolve and become increasingly complex.In this fast-changing environment, finding and exploiting potential vulnerabilities in V8 requires an understanding of its architecture, as well as analysis and exploitation techniques. In this workshop, we will share the detailed exploitation steps for beginners who have no prior experience with Chrome V8 exploits.It will be an opportunity to learn how to explore bugs using GDB, the d8 debugger and develop exploitation code. This workshop is designed for beginners, and we will provide VDI environments for hands-on practice.You can join freely with just your personal laptop and no setup required. Take this opportunity to experience Chrome V8 exploitation firsthand! PREREQUISITES&nbsp;What you should know:<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Participants must have basic knowledge of JavaScript and experience using Linux, debugging tools (pwndbg, peda, etc) to participate in this class.&nbsp;</li><li fr-original-style="" style="box-sizing: inherit;">Prior experience with system hacking or vulnerability analysis is helpful.</li></ul>What you should have ready:&nbsp;<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">A remote lab environment will be provided, so participants only need a laptop with internet access.</li><li fr-original-style="" style="box-sizing: inherit;">It&#39;s not mandatory, but having an additional device (e.g., a tablet) that can be used as a secondary monitor may be helpful for viewing lecture materials during hands-on practice.</li></ul>

Hi <span contenteditable="false" data-custom-variable="{{firstname}}" fr-original-class="fr-deletable styled-tag-chip" fr-original-style="" style="background-color: rgb(248, 248, 255); border: 1px solid rgb(191, 191, 255); border-radius: 4px; color: rgb(42, 42, 196); padding: 1px 8px; font-size: 11px; display: inline-block; margin: 0px; overflow-wrap: anywhere; user-select: none; box-sizing: inherit;">First name, Thank you for registering for the AppSec Village @ DEF CON 33 Workshop: A Taste of Chrome V8 Exploitation.&nbsp; All workshops will take place in the AppSec Village Classroom which can be found in the AppSec Village, Hall 2, of the LVCC West Hall on Level 1.&nbsp; Seats are in high demand, if you are unable to make the workshop, please let <a fr-original-style="" href="mailto:liora@appsecvillage.com" rel="noopener noreferrer" style="text-decoration-color: initial; user-select: auto; box-sizing: inherit;" target="_blank">liora@appsecvillage.com</a> know so your spot can be reallocated. If you have registered for a Waitlist ticket, we will notify you via email/phone should a spot become available. Please be sure to review the prerequisites below in order to come prepared.&nbsp;What you should know:<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">Participants must have basic knowledge of JavaScript and experience using Linux, debugging tools (pwndbg, peda, etc) to participate in this class.</li><li fr-original-style="" style="box-sizing: inherit;">Prior experience with system hacking or vulnerability analysis is helpful.</li></ul>What you should have ready:<ul fr-original-style="" style="box-sizing: inherit;"><li fr-original-style="" style="box-sizing: inherit;">A remote lab environment will be provided, so participants only need a laptop with internet access.</li><li fr-original-style="" style="box-sizing: inherit;">It&#39;s not mandatory, but having an additional device (e.g., a tablet) that can be used as a secondary monitor may be helpful for viewing lecture materials during hands-on practice.</li></ul> See you at DEF CON! Liora HermanQueen, Appsec Village AppSec Village is a 100% volunteer-run organization. Please consider supporting us. <span contenteditable="false" data-button-color="{{#5de5c8}}" data-custom-variable="{{form-link-button-a8956ff8-904d-4227-88fb-eb035320b416}}" data-prefilled-form-id="{{71ad25a9-be7a-4956-9177-9b18c997b85e}}" data-prefilled-form-type="{{DonationForm}}" data-text="{{Donate Now!}}" fr-original-class="fr-deletable styled-tag-button" fr-original-style="background-color: #5de5c8" style="background-color: rgb(93, 229, 200); border-radius: 8px; height: 36px; color: rgb(255, 255, 255); padding: 8px 16px; font-size: 14px; line-height: 20px; font-family: Roboto; font-weight: 500; display: inline-block; margin: 0px; overflow-wrap: anywhere; user-select: none; box-sizing: inherit;">Donate Now!

As vulnerabilities are discovered and security patches are applied, the structure of the Chrome V8 Engine and its internal sandbox continues to evolve and become increasingly complex.In this fast-changing environment, finding and exploiting potential vulnerabilities in V8 requires an understanding of its architecture, as well as analysis and exploitation techniques. In this workshop, we will share the detailed exploitation steps for beginners who have no prior experience with Chrome V8 exploits.It will be an opportunity to learn how to explore bugs using GDB, the d8 debugger and develop exploitation code. This workshop is designed for beginners, and we will provide VDI environments for hands-on practice.You can join freely with just your personal laptop and no setup required. Take this opportunity to experience Chrome V8 exploitation firsthand! PREREQUISITES What you should know:<ul><li>Participants must have basic knowledge of JavaScript and experience using Linux, debugging tools (pwndbg, peda, etc) to participate in this class. </li><li>Prior experience with system hacking or vulnerability analysis is helpful.</li></ul>What you should have ready: <ul><li>A remote lab environment will be provided, so participants only need a laptop with internet access.</li><li>It's not mandatory, but having an additional device (e.g., a tablet) that can be used as a secondary monitor may be helpful for viewing lecture materials during hands-on practice.</li></ul>

AppSec Village

A Taste of Chrome V8 Exploitation

300 Convention Center Dr

Classroom Admission

Free

Waitlist

Free