Jump to content

Chrome crash bug


deadlyhabit
 Share

Recommended Posts

There was a git page that made it into a game where you had bear face and pine tree icons structured like a maze. Move your mouse in over the bear faces and follow that path through the maze. If you hit a pine tree your browser crashes (meaning you get a blank page that says there was a problem, but it did bring down a few more pages that were dealt with by the same browser program instance).

Link to comment
Share on other sites

This is interesting. I've never messed around with URL encoding in this way. Can you tell it to do something else like:

Is there a not null %21/%30/%30

/%%C3%B7%30%30

or

/%%C3%B7%%30

or is /%%30%30 all you can do?

I mean can craft a URL like you can craft an SQL statement?

Edited by vailixi
Link to comment
Share on other sites

The address bar, is basically an open input to the system that wants to convert everything to a hex and binary set of numbers it can read, including all the text. We use URL encodings like %20 to represent a space in a URL, which gets parsed and then converted down to the hexadecimal equivalents. You can use hex, binary, and octal encoded urls, after obtaining the IP from a website, which will render sites with static IP addresses. The fact that a null string gets passed just shows that there are unsanitized values still lurking about that can be used to do nefarious things. We used to use this IP trick to get around filters back in the day. Using calc.exe on your pc, and access to a command prompt, you could encode the values of a pinged IP address to get around (weak) filter blocks for websites if they blocked the domain name. URL encoded strings work as well.

Example:

​​Pinging google.com [216.58.217.142]
(Octal dword converted on scientific calulator)
216 = 0330.
58 = 0072.
217 = 0331.
142 = 0216

Which works to go to google with:
http://0330.0072.0331.0216/ 
Link to comment
Share on other sites

There was a git page that made it into a game where you had bear face and pine tree icons structured like a maze. Move your mouse in over the bear faces and follow that path through the maze. If you hit a pine tree your browser crashes (meaning you get a blank page that says there was a problem, but it did bring down a few more pages that were dealt with by the same browser program instance).

I came across this game a few days ago at work, lol. Kind of fun.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...