I’m very excited to announce that we at V8 Security have finally published our first version of Fuzzilli that understands Wasm!
Go check it out at https://github.com/googleprojectzero/fuzzilli.
While we still have a way to go in improving it, we think it shows a promising approach!
Go check it out at https://github.com/googleprojectzero/fuzzilli.
While we still have a way to go in improving it, we think it shows a promising approach!
February 4, 2025 at 7:34 PM
I’m very excited to announce that we at V8 Security have finally published our first version of Fuzzilli that understands Wasm!
Go check it out at https://github.com/googleprojectzero/fuzzilli.
While we still have a way to go in improving it, we think it shows a promising approach!
Go check it out at https://github.com/googleprojectzero/fuzzilli.
While we still have a way to go in improving it, we think it shows a promising approach!
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojec...
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
Add V8SandboxFuzzer · googleprojectzero/fuzzilli@675eccd
This is a basic fuzzer for the V8 Sandbox. It uses the memory corruption
API to implement a random-but-deterministic (given a seed) traversal
through the V8 heap object graph and corrupts some obje...
github.com
August 1, 2025 at 7:21 AM
We released our Fuzzilli-based V8 Sandbox fuzzer: github.com/googleprojec...
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
It explores the heap to find interesting objects and corrupts them in a deterministic way using V8's memory corruption API. Happy fuzzing!
Could be interesting to try existing fuzzers too, eg github.com/googleprojec...
GitHub - googleprojectzero/fuzzilli: A JavaScript Engine Fuzzer
A JavaScript Engine Fuzzer. Contribute to googleprojectzero/fuzzilli development by creating an account on GitHub.
github.com
July 6, 2025 at 10:04 AM
Could be interesting to try existing fuzzers too, eg github.com/googleprojec...
A new AI review! googleprojectzero/sandbox-attacksurface-analysis-tools ⭐3.7/5.0
`sandbox-attacksurface-analysis-tools` is a well-known Windows security research toolkit (by Project Zero) focused on probing sandbox bounda...
https://gitrated.com/googleprojectzero/sandbox-attacksurface-analysis-tools
`sandbox-attacksurface-analysis-tools` is a well-known Windows security research toolkit (by Project Zero) focused on probing sandbox bounda...
https://gitrated.com/googleprojectzero/sandbox-attacksurface-analysis-tools
March 27, 2026 at 8:03 AM
A new AI review! googleprojectzero/sandbox-attacksurface-analysis-tools ⭐3.7/5.0
`sandbox-attacksurface-analysis-tools` is a well-known Windows security research toolkit (by Project Zero) focused on probing sandbox bounda...
https://gitrated.com/googleprojectzero/sandbox-attacksurface-analysis-tools
`sandbox-attacksurface-analysis-tools` is a well-known Windows security research toolkit (by Project Zero) focused on probing sandbox bounda...
https://gitrated.com/googleprojectzero/sandbox-attacksurface-analysis-tools
A 0-click exploit chain for the Pixel 10 allowed full device compromise without any user interaction. Google Project Zero's findings highlight how convenience features can become major security liabilities. Is your Pixel 10…
https://www.tpp.blog/20i98s7
#cybersecurity #pixel10 #googleprojectzero
https://www.tpp.blog/20i98s7
#cybersecurity #pixel10 #googleprojectzero
May 16, 2026 at 2:15 AM
A 0-click exploit chain for the Pixel 10 allowed full device compromise without any user interaction. Google Project Zero's findings highlight how convenience features can become major security liabilities. Is your Pixel 10…
https://www.tpp.blog/20i98s7
#cybersecurity #pixel10 #googleprojectzero
https://www.tpp.blog/20i98s7
#cybersecurity #pixel10 #googleprojectzero
Apple quietly releases updates iOS 17.4.1, iPadOS 17.4.1 builds
www.powerpage.org/apple-quietl...
#Apple #bug #fix #iOS #iPadOS #software #update #developer #iOS1741 #iPadOS1741 #build #hack #privacy #security #Google #GoogleProjectZero
www.powerpage.org/apple-quietl...
#Apple #bug #fix #iOS #iPadOS #software #update #developer #iOS1741 #iPadOS1741 #build #hack #privacy #security #Google #GoogleProjectZero
Apple quietly releases updated iOS 17.4.1, iPadOS 17.4.1 builds
Apple last week released its iOS 17.4.1 and iPadOS 17.4.1 updates to iPhone and iPad users, releasing two important security patches in the process. For a reason that has yet to be declared…
www.powerpage.org
March 28, 2024 at 10:37 AM
Apple quietly releases updates iOS 17.4.1, iPadOS 17.4.1 builds
www.powerpage.org/apple-quietl...
#Apple #bug #fix #iOS #iPadOS #software #update #developer #iOS1741 #iPadOS1741 #build #hack #privacy #security #Google #GoogleProjectZero
www.powerpage.org/apple-quietl...
#Apple #bug #fix #iOS #iPadOS #software #update #developer #iOS1741 #iPadOS1741 #build #hack #privacy #security #Google #GoogleProjectZero
MiniPlasma zero-day exploit targets Windows cldflt.sys, reportedly gaining SYSTEM access on fully patched Windows 11. Chaotic Eclipse also released a PoC and source code. #MiniPlasma #cldflt #Windows11
New Windows 'MiniPlasma' zero-day exploit gives SYSTEM access, PoC released
A researcher known as Chaotic Eclipse has released the MiniPlasma proof-of-concept exploit, claiming it can still gain SYSTEM privileges on fully patched Windows 11 systems through the cldflt.sys Cloud Filter driver. The disclosure adds to a series of recent Windows zero-days from the same researcher, including BlueHammer, RedSun, YellowKey, and GreenPlasma. #MiniPlasma #ChaoticEclipse #cldfltsys #GoogleProjectZero #Microsoft
www.hendryadrian.com
May 18, 2026 at 12:45 AM
MiniPlasma zero-day exploit targets Windows cldflt.sys, reportedly gaining SYSTEM access on fully patched Windows 11. Chaotic Eclipse also released a PoC and source code. #MiniPlasma #cldflt #Windows11
Google's Project Zero team has publicly disclosed a UAF flaw in the popular libxslt library following GNOME's inability to fix it within 90 days of private reporting. #GoogleProjectZero #GNOME #KDE
Google Project Zero exposes security flaw in libxslt library used in GNOME applications
Google's Project Zero team has publicly disclosed a UAF flaw in the popular libxslt library following GNOME's inability to fix it within 90 days of private reporting.
www.neowin.net
August 5, 2025 at 1:36 PM
Google's Project Zero team has publicly disclosed a UAF flaw in the popular libxslt library following GNOME's inability to fix it within 90 days of private reporting. #GoogleProjectZero #GNOME #KDE
A new AI review! googleprojectzero/domato ⭐3.6/5.0
Domato is a mature, practical generation-based DOM fuzzer from Google Project Zero, centered around a reusable context-free grammar engine (`grammar.
https://gitrated.com/googleprojectzero/domato
Domato is a mature, practical generation-based DOM fuzzer from Google Project Zero, centered around a reusable context-free grammar engine (`grammar.
https://gitrated.com/googleprojectzero/domato
March 19, 2026 at 11:20 AM
A new AI review! googleprojectzero/domato ⭐3.6/5.0
Domato is a mature, practical generation-based DOM fuzzer from Google Project Zero, centered around a reusable context-free grammar engine (`grammar.
https://gitrated.com/googleprojectzero/domato
Domato is a mature, practical generation-based DOM fuzzer from Google Project Zero, centered around a reusable context-free grammar engine (`grammar.
https://gitrated.com/googleprojectzero/domato
Google Project Zero 0days-in-the-Wild - In-the-Wild Exploit Root Cause Analysis.
Systematic RCA templates for 0-days involving type confusion, UAF, and integer overflows in browsers and kernels.
Documents attac…
🔁 RT @0x0Huda | reposted by @thegrugq
https://x.com/0x0Huda/status/2061010315341394246
🔁 RT @0x0Huda | reposted by @thegrugq
https://x.com/0x0Huda/status/2061010315341394246
GitHub - googleprojectzero/0days-in-the-wild: Repository for information about 0-days exploited...
t.co
June 1, 2026 at 6:01 AM
Google Project Zero 0days-in-the-Wild - In-the-Wild Exploit Root Cause Analysis.
Systematic RCA templates for 0-days involving type confusion, UAF, and integer overflows in browsers and kernels.
Documents attac…
🔁 RT @0x0Huda | reposted by @thegrugq
https://x.com/0x0Huda/status/2061010315341394246
🔁 RT @0x0Huda | reposted by @thegrugq
https://x.com/0x0Huda/status/2061010315341394246