l0vecoffee / Pwn

Advanced exploits that I wrote for Pwn2Own competitions and other occasions

Pwn

Advanced exploits that I created for Pwn2Own competitions and other occasions

JavaScript Jscript9 Remote Code Execution Exploit

Full proof-of-concept exploit for a JIT Type Confusion vulnerability in Microsoft JavaScript engine (Jscript9.dll), 2017.

Parallels Desktop VM Escape

Parallels Desktop 16.1.3 arbitrary code execution exploit (guest-to-host VM escape), as showcased at Pwn2Own 2021.

Contacts

Author: Alisa Esage (@alisaesage)
My project: Zero Day Engineering Training & Intelligence
Email: [e-mail]