Web Hack List

Preliminary research

yet another way to invoke functions without parentheses

AI-collected research leads through 3 November 2026, including a November–October–September missed-article review and a targeted multilingual search alongside earlier community-source sweeps. Unranked, incomplete, not community-vetted, and subject to change.

A V8 gadget replaces Error.prepareStackTrace with Function, shapes the stack array’s string conversion into JavaScript, and uses valueOf coercion to invoke the generated function. It avoids literal call parentheses in the initial payload and requires mutable built-ins.

Record

Researcher
bartosz (skarn958)

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of bartosz (skarn958), first published at the original source. Preserved copies are kept so the citation survives its host.