SecLab console

detecting device…

RCE · web content WebKit UAF — CVE-2023-28205
Structured-clone deserializer UAF. WebContent crash = renderer RCE candidate. Fixed 16.4.1.
info-leak · web content Leak / visitor-IP oracle
Compares what JS can observe against CF-Connecting-IP for leak verification.
media parsers ImageIO / CoreAudio parser tests
Crafted media files with per-target “open with” instructions and crash reporting.
webclip / shortcut Add to Home Screen test
Standalone-mode, storage partition, service-worker support inside a WebClip.
MDM Profile / WebClip payload lab
Unsigned lab profile: WebClip + fullscreen behavior on your own device.

Live sessions

(auto-refreshing)