1

I am beginner in exploit development. My experience is developing buffer overflow exploits and shellcoding. Now I want to begin with javascript engine exploitation.

1.What are five papers, books, articles that should I read to begin.

2.What is the best vulnerability that is simple and quite recent,so it is good to practice on.

3
  • This is an incredibly broad question and does not fit the Q&A style here. If you can narrow down your question to specific things, we'd be happy to look at it. – schroeder Feb 17 '19 at 20:55
  • Your edit still does not fit the Q&A format here. Requests for lists can end up going on forever. – schroeder Feb 21 '19 at 19:09
  • I would suggest starting on simple buffer overflows without DEP and ASLR when beginning exploit development. Javascript engines are usually JIT compilers, not a friendly subject to start off with. Oh yeah and also maybe don't try to rip off Christopher Domas' handle when you want to be taken seriously. – J.A.K. Feb 21 '19 at 22:45