sandbox-escape

Full exploit chain (CVE-2019-11708 & CVE-2019-9810) against Firefox on Windows 64-bit.

Automated client-side template injection (sandbox escape/bypass) detection for AngularJS v1.x.

PoC for CVE-2022-28281 a Mozilla Firefox Out of bounds write.

This is a POC of a sandbox escape by found by Siguza. Works up to iOS 13.4.1.

All credits to wannacry :)

A simple lab created for testing CSTI vulnerability in AngularJS version 1.0.8, 1.3.20 and 1.5.8 using Sandbox Escape.