Chrome 远程代码执行0Day 简单复现
本文共 356 字，大约阅读时间需要 1 分钟。
前言
今天学长告诉我谷歌最新版出了个远程代码执行0day：
反正闲的没事，也本地实验一下。复现
看一下推特：
今天中午爆出来的，作者也在github上给出了EXP： 影响版本是Google:Chrome: <=89.0.4389.114，确实到了最新版：
开个虚拟机去虚拟机里复现一波。 要求是谷歌浏览器没有开启SandBox模式，其实大部分谷歌浏览器都是开启的，可能只有极少部分用户可能会出现开启sandbox模式打不开页面才给关掉了。 谷歌浏览器这里改一下： 
最后面加上-no-sandbox就可以关闭sandbox模式。 然后就是把github上的exploit.html和exploit.js下载下来。然后用这个快捷方式的谷歌浏览器访问： 
成功弹出calc。 继续看了一下推特，也有人已经写出了POC： 转载地址：http://siis.baihongyu.com/
你可能感兴趣的文章
No 'Access-Control-Allow-Origin' header is present on the requested resource.
查看>>
NO 157 去掉禅道访问地址中的zentao
查看>>
no available service ‘default‘ found, please make sure registry config corre seata
查看>>
No compiler is provided in this environment. Perhaps you are running on a JRE rather than a JDK?
查看>>
no connection could be made because the target machine actively refused it.问题解决
查看>>
No Datastore Session bound to thread, and configuration does not allow creation of non-transactional
查看>>
No fallbackFactory instance of type class com.ruoyi---SpringCloud Alibaba_若依微服务框架改造---工作笔记005
查看>>
No Feign Client for loadBalancing defined. Did you forget to include spring-cloud-starter-loadbalanc
查看>>
No mapping found for HTTP request with URI [/...] in DispatcherServlet with name ...的解决方法
查看>>
No mapping found for HTTP request with URI [/logout.do] in DispatcherServlet with name 'springmvc'
查看>>
No module named 'crispy_forms'等使用pycharm开发
查看>>
No module named 'pandads'
查看>>
No module named cv2
查看>>
No module named tensorboard.main在安装tensorboardX的时候遇到的问题
查看>>
No module named ‘MySQLdb‘错误解决No module named ‘MySQLdb‘错误解决
查看>>
No new migrations found. Your system is up-to-date.
查看>>
No qualifying bean of type XXX found for dependency XXX.
查看>>
No qualifying bean of type ‘com.netflix.discovery.AbstractDiscoveryClientOptionalArgs＜?＞‘ available
查看>>
No resource identifier found for attribute 'srcCompat' in package的解决办法
查看>>
no session found for current thread
查看>>