CVE-2019-5782_CVE-2019-13768

https://googleprojectzero.blogspot.com/2019/04/virtually-unlimited-memory-escaping.html استغلالات CVE-2019-7582 و CVE-2019-13768/P0 issue 1755 يستهدف Chrome 71.0.3578.98 لزم تحديث إثبات المفهوم الأصلي ليعمل على Windows 10 1909+. كذلك كان ضرورياً زيادة الموثوقية على جهاز مستهدف معين حيث كانت موثوق...

CVE-2021-30551

CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: root@kitploit: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080...

PoC

PoC Коллекция proof-of-concept кодов от DARKNAVY. CVE-2025-43300 Цель: iOS && macOS Версия: до iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Цель: Рендерер Chrome Версия: до 138.0.7204.96 CVE-2024-5274 Цель: Рендерер Chrome Версия: до 125.0.6422.112 Блог-пост: CVE-2024-5274: Незначительный дефект в...

neto

مشروع Neto: مجموعة أدوات لتحليل إضافات المتصفحات نظرة عامة مشروع Neto هو حزمة Python 3 صُممت لتحليل وكشف الميزات المخفية لإضافات وملحقات المتصفحات المعروفة مثل Firefox وChrome. يقوم بأتمتة عملية فك ضغط الملفات المجمعة لاستخراج هذه الميزات من الموارد ذات الصلة في الإضافة مثل manifest.json ومجلدات...

Chrome-and-Edge-Version-Dumper

Chrome-and-Edge-Version-Dumper Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096 Make sure to edit the paths before using AND make the folder for the output to be stored...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...

xsser

XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...

Leaked-Credentials

Pour rechercher des identifiants divulgués à l'aide des outils de développement de Google Chrome et d'expressions régulières, suivez ces quelques étapes : 1. Ouvrir DevTools : Dans Chrome, accédez au site que vous inspectez, puis ouvrez les outils de développement avec Ctrl+Shift+I Windows/Linux ...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

CVE-2023-4427

CVE-2023-4427 CVE-2023-4427 was found by glazunov, and you can find RCA in his report chrome version: 117.0.5938.62 in linux from v8ctf. I choose a very unstable method. To bypass ASLR, use many iframes with different domains in main.html to brute high address, you can change your /etc/hosts to...

cdb

Pown CDB Pown CDB هي أداة مساعدة لبروتوكول تصحيح كروم. الهدف الرئيسي للأداة هو أتمتة المهام الشائعة للمساعدة في تصحيح تطبيقات الويب من سطر الأوامر ومراقبة واعتراض طلبات واستجابات HTTP بشكل نشط. هذا مفيد بشكل خاص أثناء اختبارات الاختراق وأنواع أخرى من تقييمات الأمن والتحقيقات. لقطة شاشة --- الإسنا...

cdb

Pown CDB Pown CDB is a Chrome Debug Protocol utility. The main goal of the tool is to automate common tasks to help debug web applications from the command-line and actively monitor and intercept HTTP requests and responses. This is particularly useful during penetration tests and other types of...

exploits

exploits CVE-2021-22600: Exploit LPE du noyau Linux CVE-2021-3156: Élévation de privilèges locale sous Linux via un débordement de tas dans sudo Démo CVE-2021-3156: Exploit one-shot pour la vulnérabilité de débordement de tas dans sudo CVE-2020-6507: Écriture hors limites dans V8. Versions de...

webrtc-ips

Demandes d'adresses IP STUN pour WebRTC Démo: https://diafygi.github.io/webrtc-ips/ Ce que cela fait Firefox et Chrome ont implémenté WebRTC, qui permet d'envoyer des requêtes à des serveurs STUN renvoyant les adresses IP locales et publiques de l'utilisateur. Ces résultats de requêtes sont...

dorkish

Dorkish أثناء مرحلة الاستطلاع أو عند إجراء OSINT، غالبًا ما نستخدم Google Dorking وShodan، ومن هنا جاءت فكرة Dorkish. Dorkish هي أداة إضافة لمتصفح Chrome تسهل إنشاء dorks مخصصة لـ Google وShodan باستخدام المنشئ، وتقدم dorks مبنية مسبقًا للاستطلاع الفعال ومشاركة OSINT. التثبيت والإعداد 1- استنساخ...

chlonium

Chlonium Chlonium is an application designed for cloning Chromium Cookies. From Chromium 80 and upwards, cookies are encrypted using AES-256 GCM, with a state key which is stored in the Local State file. This state key is encrypted using DPAPI. This is a change from older versions, which used DPA...

https-everywhere

Update on HTTPS Everywhere ⚠️This project is no longer being maintained or updated. Please uninstall and direct users to the advice below to switch to HTTPS by default natively. You no longer need HTTPS Everywhere to set HTTPS by default! Major browsers now offer native support for an HTTPS only...