fastfuz-chrome-ext

FastFuzz Chrome Extension Fuzzing rápido de sitios web con extensión de Chrome Captura de pantalla Instalación Añadir tus archivos personalizados Abre files.txt Pega el nombre de tu archivo o directorio línea por línea Feliz cacería TAREAS PENDIENTES Añadir hallazgos de tamaño de respuesta Añadir...

crx-scouter

中文文档 crx-scouter.js puede detectar qué extensiones de Chrome estamos usando en silencio, y puede detectar si la persona frente al navegador es un hacker increíble o un programador de alto nivel 🐱. Se puede usar para honeypots, identificación humano-máquina, contramedidas de bloqueo de anuncios,...

Needle

Needle Extensión de Chrome para acceso instantáneo a tu panel de envío de bug bounty de varias plataformas + informes divulgados públicamente + bugbountytip Needle es la única extensión de Chrome que podrías necesitar para tener acceso con un clic a tus envíos de errores en varias plataformas. No...

CVE-2020-16012-PoC

M2 Project - Side Channel Attack Client Chrome Version 83 Installation Link https://commondatastorage.googleapis.com/chromium-browser-snapshots/index.html?prefix=Linuxx64/756066/ Launch command root@kitploit: unzip Linux...chrome.zip cd chrome-linux/ ./chrome --disable-gpu...

CVE-2020-6468-Chrome-Exploit

Exploit de Chrome CVE-2020-6468 Exploit para Issue 1076708. Escribí este exploit hace 2 años y luego me olvidé de él :| exploitv8.js es un exploit escrito para d8 mientras que exploitchrome.html apunta a Chrome...

cookie_crimes

Extracción de cookies de Chrome sin ser root Esto imprimirá las cookies de Chrome de un usuario. No necesitas su contraseña ni ser root para usarlo. genial genial genial genial genial. Si no eres del tipo de persona que regularmente obtiene la capacidad de ejecutar código en las computadoras de...

cookie_crimes

Chrome Cookie Extraction Without Root This will print out a user's Chrome cookies. You don't need to have their password or be root to use it. nice nice nice nice nice. If you are not the kind of person who regularly gets the ability to execute code on other people's computers, you probably don't...

CVE-2019-5782_CVE-2019-13768

https://googleprojectzero.blogspot.com/2019/04/virtually-unlimited-memory-escaping.html Exploits CVE-2019-7582 y CVE-2019-13768/P0 issue 1755 Objetivos Chrome 71.0.3578.98 Necesario actualizar el PoC original para que funcione en Windows 10 1909+. También fue necesario aumentar la fiabilidad en u...

CVE-2021-30551

CVE-2021-30551 My exp for chrome V8 CVE-2021-30551 You can found your chrome version by chrome://version or go to http://whatsmyuseragent.org/ You can set up a webserver locally using python like: root@kitploit: python3 -m http.server 8080 And the test it by accessing http://127.0.0.1:8080...

PoC

PoC A collection of proof-of-concept codes from DARKNAVY. CVE-2025-43300 Target: iOS && macOS Version: before iOS 18.6.2 && macOS 14.7.8 CVE-2025-6554 Target: Chrome Renderer Version: before 138.0.7204.96 CVE-2024-5274 Target: Chrome Renderer Version: before 125.0.6422.112 Blog Post: CVE-2024-527...

neto

مشروع Neto: مجموعة أدوات لتحليل إضافات المتصفحات نظرة عامة مشروع Neto هو حزمة Python 3 صُممت لتحليل وكشف الميزات المخفية لإضافات وملحقات المتصفحات المعروفة مثل Firefox وChrome. يقوم بأتمتة عملية فك ضغط الملفات المجمعة لاستخراج هذه الميزات من الموارد ذات الصلة في الإضافة مثل manifest.json ومجلدات...

Chrome-and-Edge-Version-Dumper

Chrome-and-Edge-Version-Dumper Powershell script that dumps Chrome and Edge version to a text file in order to determine if you need to update due to CVE-2022-1096 Make sure to edit the paths before using AND make the folder for the output to be stored...

ppfuzz

ppfuzz Prototype Pollution Fuzzer A fast tool to scan client-side prototype pollution vulnerability written in Rust. 🦀 Installation Binary Source Dependencies Demonstration Usage Basic Options Usage Supporting Materials Contributing Attribution Acknowledments License Installation...

CVE-2021-30573

CVE 2021-30573 Google Chrome Vulnerabilities CVE-2021-30573 Use after free in GPU in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2021-30573 Detail Vulnerable versions : The bug works in Google Chrome 91 or lower. It is patched in 92+...

CVE-2014-0160-Chrome-Plugin

Heartbleed chrome plugin DEPRECATED Chrome plugin who will look-up if the current site and all subdomains called are vulnerable to CVE-2014-0160. The vulnerability check is done by an API service who's now dead it wasn't in 2014! May the code can be useful to someone anyway, if someone found a ne...

Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day

Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild. The high-severity vulnerability, tracked as CVE-2026-85046 CVSS score: 8.8, has been described as a type confusion bug in V8, Chrome's JavaScript and...

xsser

XSSER Presentation From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 Demo Version 2.0 - 2015: https://www.youtube.com/playlist?list=PLIjb28IYMQgqqqApoGRCZO40vP-eKsgf Version 2.5 - 2016: https://www.youtube.com/playlist?list=PLRic6PgcrsWGkgacL6WFnSQKVRZIoofRj Version 2.75 - 2017: None Currently...

Leaked-Credentials

To search for leaked credentials using Google Chrome's Developer Tools and regex, follow these short steps: 1. Open DevTools: In Chrome, navigate to the site you're inspecting, then open Developer Tools with Ctrl+Shift+I Windows/Linux or Cmd+Option+I macOS. 2. Go to Network Tab: Click on the...

Chrome-V8-RCE-CVE-2021-38003

Chrome-V8-RCE-CVE-2021-38003 CVE-2021-38003 exploits extracted from https://twitter.com/WhichbufferArda/status/1609604183535284224...

CVE-2023-4427

CVE-2023-4427 CVE-2023-4427 was found by glazunov, and you can find RCA in his report chrome version: 117.0.5938.62 in linux from v8ctf. I choose a very unstable method. To bypass ASLR, use many iframes with different domains in main.html to brute high address, you can change your /etc/hosts to...