Chrome crash bug

[deadlyhabit]

Basically if you append /%%30%30 to the end of any url you manually enter it will crash chrome (desktop) and a mouse over of a link containing it can crash chrome, or just the page you were on with the link.

On mobile Chrome only mouse over works at least from testing it on my tablet and phone.

[digip]

Works on newer Opera browsers as well.

[cooper]

There was a git page that made it into a game where you had bear face and pine tree icons structured like a maze. Move your mouse in over the bear faces and follow that path through the maze. If you hit a pine tree your browser crashes (meaning you get a blank page that says there was a problem, but it did bring down a few more pages that were dealt with by the same browser program instance).

[vailixi]

This is interesting. I've never messed around with URL encoding in this way. Can you tell it to do something else like:

Is there a not null %21/%30/%30

/%%C3%B7%30%30

or

/%%C3%B7%%30

or is /%%30%30 all you can do?

I mean can craft a URL like you can craft an SQL statement?

Edited September 24, 2015 by vailixi

[digip]

The address bar, is basically an open input to the system that wants to convert everything to a hex and binary set of numbers it can read, including all the text. We use URL encodings like %20 to represent a space in a URL, which gets parsed and then converted down to the hexadecimal equivalents. You can use hex, binary, and octal encoded urls, after obtaining the IP from a website, which will render sites with static IP addresses. The fact that a null string gets passed just shows that there are unsanitized values still lurking about that can be used to do nefarious things. We used to use this IP trick to get around filters back in the day. Using calc.exe on your pc, and access to a command prompt, you could encode the values of a pinged IP address to get around (weak) filter blocks for websites if they blocked the domain name. URL encoded strings work as well.

Example:

​​Pinging google.com [216.58.217.142]
(Octal dword converted on scientific calulator)
216 = 0330.
58 = 0072.
217 = 0331.
142 = 0216

Which works to go to google with:
http://0330.0072.0331.0216/ 

[sud0nick]

There was a git page that made it into a game where you had bear face and pine tree icons structured like a maze. Move your mouse in over the bear faces and follow that path through the maze. If you hit a pine tree your browser crashes (meaning you get a blank page that says there was a problem, but it did bring down a few more pages that were dealt with by the same browser program instance).

I came across this game a few days ago at work, lol. Kind of fun.