Breaking the Chrome Sandbox with Mojo

If you manage to exploit a Chrome renderer vulnerability, you find yourself in a tight sandbox. Access to OS resources like the file system are greatly restricted and site isolation still enforces the web security guarantees. To allow such strong restrictions, various IPC services provide required functionality to the renderer process which themselves can become a target for sandbox escapes....
By: Stephen Röttger
Full Abstract & Presentation Materials: www.blackhat.c...