This repository contains proof of concept exploits for CVE-2024-5836 and CVE-2024-6778, which are vulnerabilities within the Chromium web browser which allowed for a sandbox escape from a browser extension.
To run these, you must be on a version of Chromium older than 126.0.6478.54.
Write up
Bug report
Both the CVE-2024-5386 and CVE-2024-6778 directories contains a POC Chrome extension that is able to execute arbitrary JS on privileged WebUI pages. CVE-2024-5386 relies on a race condition and is fairly unreliable, while CVE-2024-6778 does not.
The sandbox-escape directory contains the full exploit chain, using CVE-2024-6778 to gain code execution in chrome://policy, which leads to a sandbox escape by setting the legacy browser support policies.
This repository is licensed under the MIT license.
General Working of a Web Application Firewall (WAF) A Web Application Firewall (WAF) acts as…
How to Send POST Requests Using curl in Linux If you work with APIs, servers,…
If you are a Linux user, you have probably seen commands like chmod 777 while…
Vim and Vi are among the most powerful text editors in the Linux world. They…
Working with compressed files is a common task for any Linux user. Whether you are…
In the digital era, an email address can reveal much more than just a contact…