CVE-2021-21220

This repository contains a functional C2 framework leveraging CVE-2021-21220 (Chromium V8 exploit) to deliver a Windows implant via shellcode embedded in a webpage. The implant establishes mTLS communication with a C2 server through a redirector, providing a reverse shell.

This repository contains a functional exploit PoC for CVE-2021-21220, demonstrating a JIT optimization bug in V8 leading to OOB access and RCE via WebAssembly manipulation. The code includes detailed steps for triggering the vulnerability and achieving arbitrary code execution.

This repository contains a functional exploit for CVE-2021-21220, leveraging a client-side vulnerability to execute shellcode in a victim's browser, which then downloads and executes a malicious payload. The infrastructure includes a C2 server, redirectors, and exfiltration mechanisms, demonstrating a full attack chain.

This repository contains a functional exploit for CVE-2021-21220, a Chrome V8 engine vulnerability. The exploit leverages a type confusion bug to achieve arbitrary read/write primitives, ultimately executing shellcode on the victim's machine via a malicious webpage.

This repository contains a functional exploit for CVE-2021-21220, a V8 engine vulnerability in Chrome. The exploit leverages a type confusion bug to achieve arbitrary read/write primitives and executes shellcode in a RWX memory page.

This Metasploit module exploits CVE-2021-21220, a V8 engine vulnerability in Google Chrome before 89.0.4389.128, using a XOR typer out-of-bounds access to achieve remote code execution. It leverages JavaScript and WebAssembly to bypass memory protections and execute arbitrary shellcode.