Post B6UL6mBOkW4G9v9cwq by rebane2001@infosec.exchange
 (DIR) More posts by rebane2001@infosec.exchange
 (DIR) Post #B6UHSDH2ox6QRelI2K by rebane2001@infosec.exchange
       2 likes, 3 repeats
       
       back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet memberin edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browsertoday, almost 4 years later, the bug is finally public:https://issues.chromium.org/issues/40062121
       
 (DIR) Post #B6UKhzw2Tv7LZU9fl2 by natty@astolfo.social
       0 likes, 0 repeats
       
       @rebane2001@infosec.exchange Oh no the second I saw the download bit I knew it's gotta be content-dispositionSneaky
       
 (DIR) Post #B6UL6lvngVahNXrAdU by 4censord@unfug.social
       0 likes, 0 repeats
       
       @rebane2001 hmm I can't see that bug report, it just promts me to sign in
       
 (DIR) Post #B6UL6mBOkW4G9v9cwq by rebane2001@infosec.exchange
       0 likes, 0 repeats
       
       @4censord works for me on a fresh session, might have to wait for it to load?
       
 (DIR) Post #B6UL6mOVxkYkobI6OO by 4censord@unfug.social
       0 likes, 0 repeats
       
       @rebane2001 hmm, nothing is loading for me, I've waited around 30sThere is also no loading indicator.I'm using a similar browser as well, its also Firefox klar
       
 (DIR) Post #B6UL6mVFYhwn9URTtI by natty@astolfo.social
       0 likes, 0 repeats
       
       @4censord@unfug.social @rebane2001@infosec.exchange Klar is a Germany-specific thing, it might have different rules
       
 (DIR) Post #B6ULELzc0VuDFTFqpU by rebane2001@infosec.exchange
       1 likes, 0 repeats
       
       @natty @4censord mine's firefox focus
       
 (DIR) Post #B6US0LVrh4chNxbmim by rebane2001@infosec.exchange
       1 likes, 2 repeats
       
       OH NO I JUST REALIZED THIS IS NOT ACTUALLY PROPERLY FIXED AND STILL WORKS 💀💀
       
 (DIR) Post #B6US0M0Lrj0euVs8Ey by rebane2001@infosec.exchange
       0 likes, 1 repeats
       
       even worse, edge no longer even makes the download menu pop up, so it's completely silent js rce that keeps running even after you close the browser !!all from just visiting a single website once !!
       
 (DIR) Post #B6UZHVt54ffOABbIOW by Sylvhem@eldritch.cafe
       0 likes, 0 repeats
       
       @rebane2001 Oops.
       
 (DIR) Post #B6VOwwB3KTojEdW5fE by Eldeberen@social.middleearth.fr
       1 likes, 0 repeats
       
       @rebane2001 Service Workers working as intended… :|