<![CDATA[back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member]]>back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member

in edge, you wouldn't even notice anything out-of-place, and would stay connected to the c2 even after closing the browser

today, almost 4 years later, the bug is finally public:
https://issues.chromium.org/issues/40062121

]]>https://board.circlewithadot.net/topic/14b72ea9-dba5-4cae-867c-181fc7661bf5/back-in-2022-i-found-a-bug-that-would-let-me-with-no-user-interaction-turn-any-chromium-based-browser-into-a-permanent-js-botnet-memberRSS for NodeFri, 05 Jun 2026 05:43:42 GMTWed, 20 May 2026 11:42:20 GMT60<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 16:33:02 GMT]]>@Strabisme @cR0w yes, provided you disable js or service workers on the page

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607862876920908https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607862876920908Wed, 20 May 2026 16:33:02 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 16:27:02 GMT]]>@rebane2001 really cool work. Didn't realize this sort of bug class even existed. Hope they up the bounty; this seems worth more than $1000

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/shravanrn/statuses/116607839258118513https://board.circlewithadot.net/post/https://infosec.exchange/users/shravanrn/statuses/116607839258118513Wed, 20 May 2026 16:27:02 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 16:14:11 GMT]]>@rebane2001 I hate it; but damn that's clever.

]]>https://board.circlewithadot.net/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/116607788773559053https://board.circlewithadot.net/post/https://cyberplace.social/users/fuzzyfuzzyfungus/statuses/116607788773559053Wed, 20 May 2026 16:14:11 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 16:06:01 GMT]]>@rebane2001 @SamantazFox It's on archive.today/.is/.ph. Only go there with a content blocker, you're DDoSing a small blog otherwise: https://gyrovague.com/2026/02/01/archive-today-is-directing-a-ddos-attack-against-my-blog/

]]>https://board.circlewithadot.net/post/https://fosstodon.org/users/Lenni/statuses/116607756616035726https://board.circlewithadot.net/post/https://fosstodon.org/users/Lenni/statuses/116607756616035726Wed, 20 May 2026 16:06:01 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 16:04:39 GMT]]>@SamantazFox out of curiosity, where? the archive.org captures don't load for me

edit: ty 🙂

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607751274057081https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607751274057081Wed, 20 May 2026 16:04:39 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:43:56 GMT]]>@rebane2001 Well, too late, it has already been archived :x

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/SamantazFox/statuses/116607669821811656https://board.circlewithadot.net/post/https://infosec.exchange/users/SamantazFox/statuses/116607669821811656Wed, 20 May 2026 15:43:56 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:36:36 GMT]]>@rebane2001 fucking embarrassing

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/ratsnakegames/statuses/116607640959039248https://board.circlewithadot.net/post/https://mastodon.social/users/ratsnakegames/statuses/116607640959039248Wed, 20 May 2026 15:36:36 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:34:31 GMT]]>@rebane2001 Nice find! I should have woken up earlier to see the details. 😅

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/AlesandroOrtiz/statuses/116607632791636916https://board.circlewithadot.net/post/https://infosec.exchange/users/AlesandroOrtiz/statuses/116607632791636916Wed, 20 May 2026 15:34:31 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:22:19 GMT]]>@rebane2001 Oops.

]]>https://board.circlewithadot.net/post/https://eldritch.cafe/users/Sylvhem/statuses/116607584789479923https://board.circlewithadot.net/post/https://eldritch.cafe/users/Sylvhem/statuses/116607584789479923Wed, 20 May 2026 15:22:19 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:21:23 GMT]]>issue set to private again, hopefully it'll get fixed properly this time 😛

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607581137310739https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607581137310739Wed, 20 May 2026 15:21:23 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:12:27 GMT]]>@rebane2001 BeEF module ftw! 🎉

]]>https://board.circlewithadot.net/post/https://chaos.social/users/skyr/statuses/116607545981882399https://board.circlewithadot.net/post/https://chaos.social/users/skyr/statuses/116607545981882399Wed, 20 May 2026 15:12:27 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 15:08:59 GMT]]>@rebane2001 Clearly, @mozilla's choices around not implementing certain APIs is paying off.

]]>https://board.circlewithadot.net/post/https://hachyderm.io/users/egerlach/statuses/116607532399026170https://board.circlewithadot.net/post/https://hachyderm.io/users/egerlach/statuses/116607532399026170Wed, 20 May 2026 15:08:59 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 14:38:41 GMT]]>@rebane2001 peak google efficiency

]]>https://board.circlewithadot.net/post/https://has.siktir.in/users/gurkan/statuses/01KS2X64XQQKJ1RBFK0FERRPXFhttps://board.circlewithadot.net/post/https://has.siktir.in/users/gurkan/statuses/01KS2X64XQQKJ1RBFK0FERRPXFWed, 20 May 2026 14:38:41 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 14:38:26 GMT]]>@henry_null @rebane2001

i second this, sent from my epiphany

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/utf_7/statuses/116607412252465261https://board.circlewithadot.net/post/https://mastodon.social/users/utf_7/statuses/116607412252465261Wed, 20 May 2026 14:38:26 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 14:06:17 GMT]]>@rebane2001 🤦‍♂️

]]>https://board.circlewithadot.net/post/https://thx.gg/users/interpipes/statuses/116607285790905574https://board.circlewithadot.net/post/https://thx.gg/users/interpipes/statuses/116607285790905574Wed, 20 May 2026 14:06:17 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 14:04:12 GMT]]>@EdCates @rebane2001 I mean its them who made it public first I guess🤷 https://issues.chromium.org/issues/40062121#comment56

]]>https://board.circlewithadot.net/post/https://sueden.social/users/henry_null/statuses/116607277637364962https://board.circlewithadot.net/post/https://sueden.social/users/henry_null/statuses/116607277637364962Wed, 20 May 2026 14:04:12 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 14:02:07 GMT]]>@rebane2001 well that's not good...

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/TagHunt/statuses/116607269452129570https://board.circlewithadot.net/post/https://infosec.exchange/users/TagHunt/statuses/116607269452129570Wed, 20 May 2026 14:02:07 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:59:46 GMT]]>@rebane2001 uh oh
Why did it take them 4 years to (not) fix this?
I really should go ahead and disable js everywhere]]>https://board.circlewithadot.net/post/https://tsogol.tsiran.org/objects/36fc4464-5db8-4e4a-b920-bf694f11966bhttps://board.circlewithadot.net/post/https://tsogol.tsiran.org/objects/36fc4464-5db8-4e4a-b920-bf694f11966bWed, 20 May 2026 13:59:46 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:53:30 GMT]]>@cR0w no

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607235566792620https://board.circlewithadot.net/post/https://infosec.exchange/users/rebane2001/statuses/116607235566792620Wed, 20 May 2026 13:53:30 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:51:58 GMT]]>@rebane2001 I've got a dumb question: Is this something that can be mitigated with a uBlock filter? It reads like it could be but I don't know this stuff well.

]]>https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116607229509757224https://board.circlewithadot.net/post/https://infosec.exchange/users/cR0w/statuses/116607229509757224Wed, 20 May 2026 13:51:58 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:45:53 GMT]]>@rebane2001 the bot ghost is providing emotional support here

Uh oh! This issue still open and hasn't been updated in the last 262 days. This is a serious vulnerability, and we want to ensure that there's progress. Could you please leave an update with the current status and any potential blockers?

]]>https://board.circlewithadot.net/post/https://mastodon.catgirl.cloud/users/multisn8/statuses/116607205590639122https://board.circlewithadot.net/post/https://mastodon.catgirl.cloud/users/multisn8/statuses/116607205590639122Wed, 20 May 2026 13:45:53 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:39:16 GMT]]>@henry_null @rebane2001 Cue Microsoft issuing a press release accusing Rebane of "violating coordinated vulnerability best practices." They've barely had time to react, after all...

]]>https://board.circlewithadot.net/post/https://mastodon.social/users/EdCates/statuses/116607179571712274https://board.circlewithadot.net/post/https://mastodon.social/users/EdCates/statuses/116607179571712274Wed, 20 May 2026 13:39:16 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 13:09:50 GMT]]>@rebane2001 Is this what they call a 1259 day?

]]>https://board.circlewithadot.net/post/https://sueden.social/users/henry_null/statuses/116607063829235226https://board.circlewithadot.net/post/https://sueden.social/users/henry_null/statuses/116607063829235226Wed, 20 May 2026 13:09:50 GMT<![CDATA[Reply to back in 2022 i found a bug that would let me, with no user interaction, turn any chromium-based browser into a permanent js botnet member on Wed, 20 May 2026 12:47:41 GMT]]>@rebane2001 @natty they are very similar afaik, mostly branding because Germany has another established thing called "focus"

But I'll retry in fennec in a sec

]]>https://board.circlewithadot.net/post/https://unfug.social/users/4censord/statuses/116606976782999186https://board.circlewithadot.net/post/https://unfug.social/users/4censord/statuses/116606976782999186Wed, 20 May 2026 12:47:41 GMT