Browser Security and Exploitation

  1. Browser Hardening and Mitigations
    1. Compile-Time Protections
      1. Stack Canaries
        1. Canary Value Generation
          1. Stack Overflow Detection
            1. Bypass Techniques
            2. Fortify Source
              1. Buffer Overflow Detection
                1. Function Call Validation
                2. Control Flow Guard
                  1. Indirect Call Protection
                    1. Return Address Validation
                  2. Runtime Mitigations
                    1. Address Space Layout Randomization
                      1. Virtual Address Randomization
                        1. Heap Layout Randomization
                          1. Stack Randomization
                          2. Data Execution Prevention
                            1. Non-Executable Memory Pages
                              1. Hardware NX Bit Support
                                1. Software DEP Implementation
                                2. Control Flow Integrity
                                  1. Forward-Edge Protection
                                    1. Backward-Edge Protection
                                      1. Virtual Call Protection
                                    2. Hardware-Assisted Security
                                      1. Intel CET
                                        1. Shadow Stack Implementation
                                          1. Indirect Branch Tracking
                                          2. ARM Pointer Authentication
                                            1. Return Address Signing
                                              1. Function Pointer Protection
                                              2. Memory Tagging Extensions
                                                1. Tag-Based Memory Protection
                                                  1. Use-After-Free Detection

                                              Previous

                                              9. DOM and Rendering Engine Exploitation

                                              Go to top

                                              Next

                                              11. Vulnerability Research Methods