Introduction TurboRand is a v8 exploitation during the TyphoonCTF 2023, this challenge (a.k.a TruboFan is no Fun) centred around a TurboFan (V8’s optimising compiler) type confusion bug. For the challenge we provided contenders with multiple files: Looking Around Let’s inspect run (bash script): The script writes user-controlled JavaScript to a temporary file, and executes it … TurboRand: V8 Type Confusion Private Property Leak Read More »