Browser exploit

Definition#

Browser exploits are vulnerabilities in web browsers to execute unauthorized actions, such as stealing data, reading files, or obtain remote code execution.

Chrome - Remote Debugging Port#

chrome.exe --remote-debugging-port=9222

• Youtube - can you hack this screenshot service?? - CSCG 2021
• WriteUp ctf-screenshotter
• Chrome DevTools Protocol
• Local File Inclusion: http://localhost:9222/json/new?view-source:file:///etc/passwd

Vulnerabilities#

Firefox#

CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js#

• CVE-2024-4367 – Arbitrary JavaScript execution in PDF.js
• CVE-2024-4367 PoC - Github
• Version: Firefox 126, Firefox ESR 115.11 and Thunderbird 115.11 released including the fixed version of PDF.js

Chromium#

Arbitrary file reading#

• Issue 1458911: Security: Libxslt arbitrary file reading using document() method and external entities.
• Version: Chrome <= 116.0.5845.0

Access Chromium debugger Target ID#

• Issue 1385982: Security: Escape the page sandbox to the Chromium debugger via Chrome headless snapshots
• Version: Works on 107.0.5304.110