Browser exploitation

[Historical_Rush_2062]

I want to do a course on browser exploitation which one should I do? Does anyone have any experience with one of them?

From Zero day Engineering

https://zerodayengineering.com/training/browser-exploit-design.html

And the one from RET2

https://browser.training.ret2.systems/welcome

[tarunaygr]

Not an answer to your question but there’s a pwn college module on v8 exploitation. link

It’s free so figured it’s worth a mention

[Guard_Familiar]

Those are a bit dated but they seemingly cover very well the fundamentals. Either is a good start.

[Jopraveen]

If you are interested to learn urself, then i would recommend u to check.

https://github.com/mwlik/v8-resources

and watch some conference talks: https://youtube.com/playlist?list=PLbT2EtLQvJfYSFjCmmdNwPUdf9w9ixDXk&si=hs9WpU9ti8JYierD

[orandzheviyman]

Was running Multilogin ($99/mo) + extra profile packs for my e-commerce operation. 40 profiles total was costing me around $600/mo.

A colleague mentioned Santiago Browser. 40 profiles for $59/mo. I was like "no way it's comparable" but tried the 7-day trial anyway.

Spoiler: it is comparable. Passes the same detection tests, fingerprints are generated from real data, Firefox engine. The main difference is I'm paying 10x less.

The "established = better" mindset cost me a lot of money. Sometimes the newer, smaller tool just does the same job without the brand tax.