POC Google Chrome MetaCharacter URI Obfuscation Vulnerability.

Google Chrome MetaCharacter URI Obfuscation Vulnerability.

(C) SecNiche Security / Proof of Concept

By:- Aditya K Sood.


This POC has been designed with minimum object usage. This can be made more critical dependent on the object usage.

Check the Status Bar for Address Problem. Have a Look at the Source too.



The Indepth Concept of this Vulnerablility.

Look at POC.

Link1 : http://www.google.com%00@milw0rm.com

Link2 : http://www.google.com@yahoo.com

Link3 : ftp://anoymous:guest@microsoft.com

Check the Status Bar for Address Problem,


Specifcally Tested on 0.4.154.25 [Latest]


Other Version Tested:

Official Build 1798
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/525.13 (KHTML, like Gecko)
Chrome/0.2.149.29 Safari/525.13

Official Build 2200
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US)
AppleWebKit/525.13 (KHTML, like Gecko)
Chrome/0.2.149.30 Safari/525.13


Posted by CEOinIRVINE
l