Adamantium-Thief

🔓 Adamantium-Thief Get chromium based browsers: passwords, credit cards, history, cookies, bookmarks, autofill. Chrome 80 is supported! Need firefox passwords decryptor? 🌿 Examples: 🔑 Get passwords from browsers: root@kitploit: Stealer.exe PASSWORDS 💳 Get credit cards from browsers: root@kitploit...

CVE-2020-10558

CVE-2020-10558: Tesla Model S/3/X Denial of Service DoS Security Researcher: Jacob Archuleta @nullze 📝 Vulnerability Overview A critical Denial of Service DoS vulnerability was discovered in the Tesla Model 3, Model S, and Model X all versions prior to 2020.4.10. This vulnerability allowed a remo...

fortress

Un motor de navegador para gobernarlos a todos Motor Chromium sigiloso...

Chrome-App-Bound-Encryption-Decryption

ChromElevator Chrome App-Bound Encryption Decryption 🚀 Descripción general Una herramienta de post-explotación que demuestra una evasión completa en memoria del App-Bound Encryption ABE de Chromium. Este proyecto utiliza Process Hollowing reflectivo basado en syscalls directos para lanzar un...

sniffly

Sniffly2 Sniffly2 es una variante de Sniffly que abusa de las cabeceras HTTP Strict Transport Security y de la API de Performance Timing para olfatear tu historial de navegación en navegadores basados en Chromium. Demo Visita http://diracdeltas.github.io/sniffly en Chrome/Chromium/Brave/etc. con...

brash

Brash Chromium Browser DoS Attack via document.title Exploitation Brash is a critical vulnerability in Blink , the rendering engine that powers Google's Chromium-based browsers. It allows any Chromium browser to collapse in 15-60 seconds by exploiting an architectural flaw in how certain DOM...

SharpChromium

SharpChromium Introduction SharpChromium is a .NET 4.0+ CLR project to retrieve data from Google Chrome, Microsoft Edge, and Microsoft Edge Beta. Currently, it can extract: Cookies in JSON format History with associated cookies for each history item Saved Logins Note: All cookies returned are in...

chromium-exploit-dev

Kit de desarrollo de exploits para Chromium Un conjunto de herramientas para convertir vulnerabilidades de Chromium en exploits completos, fiables y multiplataforma. Resumen Este proyecto proporciona un conjunto de potentes scripts auxiliares, pero requiere que aportes tus propias vulnerabilidade...

CVE-2026-85892

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

playwright

🎭 Playwright 文档 | API 参考 Playwright 是一个用于 Web 自动化和测试的框架。它通过单一 API 驱动 Chromium、Firefox 和 WebKit——可用于测试、脚本编写，以及作为 AI 代理的工具。 快速开始 选择适合您工作流程的路径： Playwright Test Playwright Test 是一个专为端到端测试构建的全功能测试运行器。它可在 Chromium、Firefox 和 WebKit 上运行测试，具备完整的浏览器隔离、自动等待和 Web 优先断言。 安装 root@kitploit: npm init...

EUVD-2026-77693

Concurrent execution using shared resource with improper synchronization 'race condition' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2026-85892

CVE-2026-85892 is a race condition vulnerability in Microsoft Edge (Chromium-based) , caused by concurrent execution using a shared resource with improper synchronization. An authorized attacker can exploit this to elevate privileges locally , with the scope changed to allow full compromise of co...

V8Harvest

V8Harvest V8Harvest ayuda a ver patrones recientes de errores de V8 en una sola página para analizar vulnerabilidades de V8. Ha analizado todos los archivos regress- del directorio src/v8/test/mjsunit/ usando git log. Cada regress contiene los siguientes enlaces relacionados con su propia...

Find-VulnerableElectronVersion

Find-VulnerableElectronVersion Escanea un ejecutable y determina si estaba empaquetado en una versión de Electron vulnerable a la vulnerabilidad de Chromium CVE-2023-4863/ CVE-2023-5129 mediante la herramienta Strings de Sysinternals. Solo compatible con dispositivos Windows. Requiere que...

boringssl

BoringSSL BoringSSL 是 OpenSSL 的一个分支，旨在满足 Google 的需求。 尽管 BoringSSL 是一个开源项目，但它并不像 OpenSSL 那样面向通用用途。我们不建议第三方依赖它。这样做很可能会令人沮丧，因为不保证 API 或 ABI 的稳定性。 程序在使用 BoringSSL 时会自带其副本，当决定进行 API 更改时，我们会按需更新所有内容。这让我们能够在兼容性方面尽量避免妥协。这对我们有效，但可能对您无效。 BoringSSL 的诞生是因为 Google 多年来以多种方式使用 OpenSSL，并随着时间的推移积累了大量补丁，这些补丁在跟踪上游...

cve-2020-16012

This repo contains PoCs for CVE-2020-16012, a side channel vulnerability in the implementation of CanvasRenderingContext2D.drawImage in Firefox and Chromium. Read a writeup of this vulnerability on the Mozilla Attack & Defense blog. Inside benchmark is code for measuring the timing of the...

POC-CVE-2024-6778

CVE-2024-6778 This repository contains proof-of-concept exploits for CVE-2024-6778, which are vulnerabilities in the Chromium web browser that allow a sandbox escape via a browser extension. To run these exploits, you need a version of Chromium older than 126.0.6478.54. Write-up:...

CVE-2024-6778-POC

CVE-2024-5836 / CVE-2024-6778 This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension. To run these, you must be on a version of Chromium older tha...

Microsoft-Edge-Information-Disclosure

Microsoft-Edge-Information-Disclosure CVE-2024-30056 Microsoft Edge Chromium-based Information Disclosure Vulnerability This is a vulnerability in Microsoft Edge Chromium-based. The attacker was able to trick the user into revealing sensitive information without his knowledge. Poc: root@kitploit:...

Astra Linux – Vulnerability in Chromium

The use of “after free” in PDFium in Google Chrome before version 149.0.7827.53 allowed a remote attacker to execute arbitrary code within a sandbox through a crafted PDF file. Chromium security severity: Low...