I Missed One TLB Shootdown and Somehow Ended Up Controlling a Page Table
How a missed x86 TLB shootdown became page-table control in Google kernelCTF.
I had some free time, so I tried to pwn V8
How I chained three public V8 bugs against Google’s v8CTF, escaped the V8 sandbox, printed a real flag, and still received no bounty.