gnh1201 / welsonjs

WelsonJS - Build a Windows app on the Windows built-in JavaScript engine
https://catswords.social/@catswords_oss
GNU General Public License v3.0
230 stars 15 forks source link

[Uncategorized] Memory access with Chakra JIT (AKA. JavascriptNativeIntArray) #115

Closed gnh1201 closed 4 months ago

gnh1201 commented 4 months ago

Summary

In the cybersecurity industry, topics related to memory access using Chakra's JIT (often associated with JavascriptNativeIntArray) sometimes come up. This can corrupt memory, potentially leading to behaviors like those of a Reflective Loader or a Sandbox Escaper, which directly injects binary code into memory.

Although this is often mentioned in the context of security vulnerabilities, there may be legitimate ways to use this, so it is necessary to explore these possibilities.

NOTE: The WelsonJS framework does not use methods similar to those described here, as it complies with the operating system's security requirements when memory access is necessary.

Related links