Brave Software: Denial of service(POP UP Recursion) on Brave browser

Summary: Basically I have found a denial of service attack on brave browser in Linux platform.In this bug when we open the html file or visiting www.tiks.host-ed.me then click on pop up dos.html ,which contains a recurring pop up code,the Pop up freezes the entire browser window except for minimi...

Brave Software: invalid homepage URL causes 'uncaught typeerror' or blank state

Summary: The issue is when you set the homepage as https://brave.com;https://google.com.vn and then change the setting to launch brave with homepage Products affected: Tested on windows7 x64 + BraveSetup-ia32 Steps To Reproduce: 1.go to Settings - General, inject to "My home page is":...

Brave Software: [ios] Address bar spoofing in Brave for iOS

Hey Summary: I've found an address bar spoofing vulnerability in the latest version of Brave for iOS. Products affected: Brave for iOS 1.2.16 Android maybe? PoC: html var spoof = function document.write"This is not Google"; document.location = "https://google.com:1234";...

Brave Software: DOS in browser using window.print() function

Open the attached html poc in browser print window will appear again and again causing dos...

Brave Software: Denial of service attack(window object) on brave browser

Summary: hey there, The Brave browser is vulnerable to window object based denial of service attack. The brave browser fails to sanitize a check when window.close function is called in number of dynamically generated events.. The function is called in a suppressed manner and kills the parent wind...

Brave Software: [iOS] URI Obfuscation in iOS application

Summary: you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with. Products affected: Brave iOS application https://itunes.apple.com/in/app/brave-web-browser/id1052879175?mt=8 this application is vulnerable to the URI obfuscati...

Brave Software: JavaScript URL Issues in the latest version of Brave Browser

Summary: The URL javascript: can redirect users to any site, instead of executing JavaScript. Additional Notes Found as partners by @kicker http://hackerone.com/kicker and myself @smelt. Products affected: The current version of Brave Browser on Windows. The current mobile version of Brave Browse...

Brave Software: Javascript confirm() crashes Brave on PC

Hello Brave, https://hackerone.com/smelt and I found a glitch for Brave on Windows. Summary: If you run the javascript code confirm, Brave will crash. This is major for a glitch, because people may be visiting websites that have confirm messages and Brave will suddenly and unexpectedly crash for...

Brave Software: Denial of service attack on Brave Browser.

Summary: Hey there, Basically,an HTML sent by an attacker to a victim can cause dos attackwhole system log's out when that file is opened by the victim in his brave browser.This vulnerability is occurring because browser is not able to handle the input passed in alert JavaScript function.This bug...

Brave Software: [Android] HTML Injection in BatterySaveArticleRenderer WebView

Summary: HTML Injection in BatterySaveArticleRenderer WebView. Products affected: Android Brave Browser 1.9.56 Steps To Reproduce: Open https://blackfan.ru/brave or html html location="https://www.google.com/search?q=Injection Wait for a full load Click on ArticleModeButton Supporting...

Brave Software: Access to local file system using javascript

Hey, The browser can access the local files using iframes with a local html file. this is very normal and often used for local web development but javascript shouldn't be able to get the content of that iframe because this can be used to post the contents to the attackers server. something else I...

Brave Software: [iOS/Android] Address Bar Spoofing Vulnerability

Hello, I am Aaditya Purani, I would like to Report Address Bar spoofing vulnerability in Brave Browser on the IOS as well as Android Platform. All the Test have been carried out against Latest Brave Browser whose versions i have mentioned in Products affected section. Summary: Brave Browser Suffe...

Brave Software: Address Bar Spoofing - Already resolved - Retroactive report

Summary: All details were provided in the original report. You can read it here I'm reporting it here because I asked bcrypt if I should do it and he told me this: F127893 As she said me, I'm reporting here and indicating it's for a retroactive reward. If any identity confirmation or link between...

Brave Software: Status Bar Obfuscation

Summary: In this issue, Brave's Status Bar will show the link where the user will be redirected but after he clicks the link, he redirected to other website. Products affected: Latest Version of Brave Steps To Reproduce: 1. Open the HTML file 2. You will see a hyperlink of google.com, So hover yo...

Brave Software: URI Obfuscation

Summary: Typically, when obfuscating a URL, you must trick someone into viewing a website they did not want to view by tempting them with something they are familiar with. Products affected: Latest Version of Brave in Windows Steps To Reproduce: We can trick someone into viewing it like this:...

Brave Software: [website] Script injection in newsletter signup https://brave.com/brave_youth_program_signup.html

go to https://brave.com/braveyouthprogramsignup.html click become an ambasador insert malicious payloads in the fields YOU JUST WON 1m$ you will receive a mail like in the image attached. You can send phising emails and do other bad stuff. If you need more details i'm here...

Brave Software: Brave: Admin Panel Access

Steps to reproduce While browsing through the https://blog.brave.com/admin, it is getting redirected to a admin login panel https://brave.ghost.io/ghost/signin/. Consequence An attacker can easily enumerate this admin panel with the url such as https://blog.brave.com/admin and with brute force...

Brave Software: 2 Directory Listing on ledger.brave.com & vault-staging.brave.com

Hi Brave team, Have found 2 Directory listing on: - https://ledger.brave.com/swaggerui/ - https://vault-staging.brave.com/swaggerui/ Refer to screenshosts for clarification: F127337 F127336...

Brave Software: Homograph attack

Summary: when we add a site to our Homepage, it's not validate a url properly, make sure it's display the punycode. Products affected: Brave 0.12.4 Tested on mac os Steps To Reproduce: In browser add homepage with IDN http://ebаy.com/ now close and open browser again you can see it's redirect to...

Securing a travel iPhone

These are dry notes I took in the process of setting up a burner iPhone SE as a secure travel device. They are roughly in setup order. I believe iOS to be the most secure platform one can use at this time, but there are a lot of switches and knobs. This list optimizes for security versus...