47 ms·
can someone please explain to me the power of embedding a c compiler into a pdf? doesnt a compiler just output executables? would we be able to run these execu
by vuciv1 6y ago
can someone please explain to me the power of embedding a c compiler into a pdf?
doesnt a compiler just output executables? would we be able to run these executables? where would these executables get stored?
- rurban 6y agoBreaking out of the sandbox easily. Check the OS, do syscalls to read and write to the filesystem, install a reverse shell and CC.
- jml7c5 6y agoThis doesn't make sense. A C compiler that has been compiled to javascript is still just a regular javascript program. It's not given special access to anything.
- Zuider 6y agoThe JS based C compiler has no access outside the browser sandbox, but it is capable of generating actual executables which could potentially break out of the walled garden. That is why Microsoft ActiveX was deprecated as a security hazard and why their original proprietary browser was known as Internet Exploder.
- jml7c5 6y agoWhy go through the trouble of generating a blob of executable code at runtime rather than just including it in the JS source? The security guarantees are the same.