SK Shieldus' Pioneering Training Course at Black Hat USA 2025
In the ever-evolving landscape of cybersecurity, SK Shieldus stands out as a leading firm dedicated to safeguarding digital environments. Their elite white-hat hacker team, known as EQST (Experts, Qualified Security Team), is gearing up to deliver an innovative training course titled "Kickoff to V8 Exploit Every Step of the Way" at the highly anticipated Black Hat USA 2025, which takes place from August 2nd to 5th in Las Vegas.
A Unique Opportunity
This two-day course, slated for August 4th and 5th, is a remarkable opportunity for both novice and intermediate security professionals to gain hands-on experience in creating real browser exploits. Attendees will delve into the intricacies of Chrome's V8 JavaScript engine and learn to identify and exploit vulnerabilities that may compromise browser security.
The training program is structured to provide a methodical learning experience. Participants will navigate through a well-defined curriculum that begins with a foundational understanding of memory allocation and architecture, leading up to the practical implementation of a complete exploit chain capable of achieving Remote Code Execution (RCE).
Understanding V8: The Engine Behind Chrome
In 2024, significant architectural modifications were introduced to Chrome's V8 engine, raising the bar for vulnerability research. Recognizing this complexity, SK Shieldus has developed a course aimed at demystifying these changes and offering clear, step-by-step instructions to help participants grasp modern exploit techniques.
Throughout the training, participants will engage with tools such as GDB and d8 to analyze memory structures and execute various sophisticated techniques. Topics covered will include out-of-bounds vulnerabilities, arbitrary memory access exploits, and methods for bypassing security sandboxes. A thorough exploration of recent advancements in V8's sandbox architecture will also be part of the curriculum, allowing attendees to work in pre-configured remote lab settings.
Equip Yourself with Advanced Skills
By the conclusion of this immersive training experience, participants will emerge with a solid understanding of JavaScript engine security, practical skills in bug hunting for Chrome, and competencies that are directly transferable to real-world security scenarios and Capture The Flag (CTF) challenges.
Moreover, all attendees will receive access to a dedicated training setup furnished with exploit templates, sample vulnerable code, and bespoke debugging tools to solidify their learning experience.
About the Elite Team
EQST is recognized as South Korea's foremost offensive security group, excelling in red teaming and exploit development. Their commitment to cybersecurity education is demonstrated through the innovative EQST LMS platform, which fosters advanced training opportunities.
The team's legacy includes prominent showcases at global cybersecurity events, where they have introduced groundbreaking techniques for exploiting Chrome's V8 engine and demonstrated successful security assessments against automotive systems, among other achievements.
Registration Information
The training is limited in seating, and early registration is strongly advised for those interested in gaining these invaluable skills. Participants can register and find further details on the Black Hat USA website
here.
In a world rife with cyber threats, equipping oneself with expertise in browser security is essential. This opportunity from SK Shieldus and EQST is more than just a training course; it's a step towards becoming a proficient cybersecurity professional amid growing digital vulnerabilities.
Connect with SK Shieldus
For more information about EQST or SK Shieldus, follow their LinkedIn
here or their social profile on X (formerly Twitter)
here. Visit their official website for more details about their services and initiatives:
SK Shieldus.