Hi, I'm Aaron Cho, an offensive security researcher based in South Korea. I work on browser vulnerability research at SSD Secure Disclosure, currently focused on the V8 JavaScript engine.

I started this blog to document and share what I learn. There is not much material on browser vulnerability research and exploitation, and I wanted to add some. These are notes from my own study, so I will get things wrong from time to time. Corrections are welcome.