[ Chromium ] Stealth request that bypasses CSP, hides from DevTools, and leaks the real User-Agent (in case you faked it 😁) brokenbrowser.com/blog/2026-…

MS Edge - Address Bar Spoof - cracking.com.ar/demos/edgesp… Tested on: MS Edge 42.17134.1.0 Thanks @knowledge_2014, your question inspired me to test a bit and stumbled upon this bug.

IE11 - Find out where the user is going AND what she typed into the address-bar. brokenbrowser.com/revealing-… Video: youtube.com/watch?v=xyzd7PLq…

June's update: all SOP bypasses patched, but the "reading-mode" one, IMO, incomplete. See the screenshot below, @msftsecresponse Thanks! 👍

If anyone "exploits" Edge in a sec. conf, demand her to open cmd.exe instead of calc.exe. The latter can be open without vulns at all.

8 days later, Chrome is patched. Issue will become public soon [ bugs.chromium.org/p/chromium… ] From MSRC? Just the default thanks message. 🐢👍

IE11 - popUp blocker bypass - Combined with zombie alerts? popUps from everywhere! cracking.com.ar/demos/iepopu… Video: youtube.com/watch?v=GemH59jh…

Same issue sent to both @msftsecurity and @googlechrome . Instead of testing the browser speed, let's check the patching time speed! 🐰 vs 🐢?

MS Edge - UXSS/SOP bypass. [Open/Redirect/Data]. Steal cookies, passwords and more. brokenbrowser.com/sop-bypass… Video: youtube.com/watch?v=vO6LRO6S…

The Intranet bug was patched, but both UXSS/SOP bypasses are still alive. Also another one is coming out soon. 👌 "Bounty" ends next week.

MS Edge - Spoofing the Malware Page was patched today *and bypassed* again. Spoof the user again! (1 byte change) 👎 cracking.com.ar/demos/edgesm…

I didn't know that in Intranet Zone, Edge automatically opens xaml/xbap files out of the AppContainer. Interesting to jmp from Edge to IE.🐰

UXSS/SOP bypass in several programs that use the Trident engine. The IE Tab extension for Chrome is an example. youtube.com/watch?v=eDW287Vm…

MS Edge - UXSS/SOP bypass. A different method which brings us even more bugs other than UXSS. Blog once the previous ones (2) are patched🐢

MS Edge - SOP bypass / UXSS - "Tweeting like Charles Darwin" 🤣 brokenbrowser.com/sop-bypass… One minute video: youtu.be/K3Ui3JxZGnE

Another (different!) Microsoft Edge SOP bypass on the same week! 🤓😁 Bug hunter: I will blog on the weekend. Thanks for your patience!

MS Edge - SOP bypass abusing of the reading mode view. Spoof the user! Courtesy of the read: pseudo-protocol 🤣😇 brokenbrowser.com/sop-bypass…

Microsoft Edge - Detecting Installed Extensions from JS A generic method that works without manifest cooperation. 🤣 brokenbrowser.com/microsoft-…

MS Edge - Defeating the popUp blocker, the XSS filter and SuperNavigate with our fake ticket to the Intranet Zone 🤣 brokenbrowser.com/free-ticke…

MS Edge Referrer Spoof - How to spoof the referrer even after MS patch. 😱(also, inject an iframe everywhere) 😬 brokenbrowser.com/referer-sp…