Bookmarklet Executor DNS

[AshtonDavies]

Bookmarklet Executor DNS

View on Chrose • Discussion Update Notice

Echo and I have been trying for a while to host a static website that works on my DNS server to allow you guys to use the Extension Launcher and useful bookmarklets while javascript:// URLs are prohibited. It was not successful on his domain (3kh0.net).

How does it work?
The idea is that it would rewrite the Google Search side panel to a manually hosted exploit page for execution anywhere. FYI, the side panel sends links to the actual tab you're on. I am not 100% sure that this trick would work, but it's fine either way.

For convenience, the webstore would also be routed to that page.

Help Needed
I understand 99% of y'all are just skids (you're still welcome here), but need to know if any of you have access to port-forwarding on your router if you're willing to contribute. This does not work for sites hosted with a service such as Cloudflare, Vercel, Netlify and many others, probably because they ensure secure connections over https://.

If you say "bud" in this discussion, I will kidnap your mother... JK, that's what your dad did before you were living in your grandma's basement.

[ifwi4]

I have a .c1.biz subdomain, would that work? I'm a skid btw so you are gonna have to explain everything

[AshtonDavies]

Maybe, as long as you're hosting locally to your domain it should work.

[AshtonDavies]

Nevermind, Kproxy did its job, and silly me should have been using the new webstore domain to easily bypass the /webstore requirement and the need for the history.pushState() function just for chrome.management to work. I'm always solving my own discussions lol, but still, thanks to all who tried to support outside this discussion.

TUTORIAL

1. In custom name servers, set the first box to 45.90.28.195.
   You should probably refresh your connection before proceeding to ensure it is connected.
2. Visit this link. - This will link your IP address to the DNS server so it knows to rewrite your traffic to the exploit. Only one can be linked at a time, but it can be cached.
3. Visit this link: https://tiny.cc/bookmarkletexec if you are trying to use Extension Launcher. You may get a Kproxy error message if it's your first time doing this, so try this again after dismissing it.
4. If you want to execute bookmarklets with the side panel, open Google Lens from the context menu.
   This has been tested and does not work.
5. Paste your bookmarklet code in the textarea and click Run.

[AshtonDavies]

Also, is the webstore blocked by policy or an extension?

[FunnyCorgi]

I can get to the webstore normally without the DNS. It's not blocked, I am just trying to install an extension that is blocked from it.

[AshtonDavies]

I can get to the webstore normally without the DNS. It's not blocked, I just am trying to install an extension that is blocked from it.

The extension launcher does not install blocked extensions.

If the webstore is not blocked, it is not useful for you.

[FunnyCorgi]

Oh ok. I think I misunderstood the exploit and how it worked.

[AshtonDavies]

Oh ok. I think I misunderstood the exploit and how it worked.

That's alright, it happens all the time.

AkaButNice himself doesn't even like people talking about the extension launcher anymore just because it's practically useless.

[OrangeThunderFire]

This doesn't work, the extensions are still blocked

[CGRmags]

@OrangeThunderFire no shit its a bookmarklet executor

[1coolmatt8083]

yo this is great if u no what ur doing

[Blobby-Boi]

So why can’t you just open the link in the sidebar? (I know this is a dum question probably)

[Blobby-Boi]

It opens on a new window every time. Sadly, After messing around for a while it seems like the only links that actually open in the sidebar are those that end in “google.com”. Maybe there’s a way to exploit this using google sites? The link is “sites.google.com” and it does in fact open in the sidebar. There are some good news, however. I know almost for sure that if there was a method to open your website in the side bar, it would work. The window.open functions that were being used always ran twice, meaning that they opened 2 tabs.

[AshtonDavies]

Try embedding an iframe into a Google Site.

[Blobby-Boi]

I did, but it doesn’t seem to be loading…

[Blobby-Boi]

Isn’t that exploit running on chrome web store? Chrome web store is a google.com link

[Blobby-Boi]

I just checked and I am in fact able to open the webstore on the sidebar

[OrangeThunderFire]

where do I find google lens

…

On Wed, Mar 27, 2024 at 9:44 AM 1coolmatt808 ***@***.***> wrote: could u teach me how to do that — Reply to this email directly, view it on GitHub <#845 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT6Y7AY6DRAMYHXKDTB3Y2LZQPAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSMZRGEZTM> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[1coolmatt8083]

go to google.com

[1coolmatt8083]

then /lens

[1coolmatt8083]

oh whatever pc ur working on might be diff.

[1coolmatt8083]

oh and dont use it as a insect it dont work like that bro

[OrangeThunderFire]

no google lens search option for me

…

On Wed, Mar 27, 2024 at 10:02 AM BlobbyBoi ***@***.***> wrote: I hosted a video to this random website <https://streamable.com/0oqubj> — Reply to this email directly, view it on GitHub <#845 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT62ZBNY4LHBLGM3DOETY2L3RVAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSMZRGMZDE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[AshtonDavies]

no google lens search option for me

On Wed, Mar 27, 2024 at 10:02 AM BlobbyBoi @.***> wrote:

I hosted a video to this random website https://streamable.com/0oqubj

—
Reply to this email directly, view it on GitHub
#845 (reply in thread),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/BERVT62ZBNY4LHBLGM3DOETY2L3RVAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSMZRGMZDE
.
You are receiving this because you were mentioned.Message ID:
@.***>

Then you're probably on a very old version that doesn't even have the side panel if that's not in the context menu.

[OrangeThunderFire]

you all found a way to run javascript yet?

…

On Wed, Mar 27, 2024 at 4:18 PM BlobbyBoi ***@***.***> wrote: Isn’t that exploit running on chrome web store? Chrome web store is a google.com link — Reply to this email directly, view it on GitHub <#845 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT6YA2AEADOJLLM2YTD3Y2NHVRAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSMZUGIZDS> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[Blobby-Boi]

You don’t need an exploit to run javascipt. All you need is a website that can run it, or just an html page with a script on it. You can try this link and see if you can run it there

[OrangeThunderFire]

DOES ANYONE KNOW HOW TO CODE JAVASCRIPT I BEG

…

On Thu, Mar 28, 2024 at 6:12 AM 1coolmatt808 ***@***.***> wrote: ya well have u tryed to use a better pc — Reply to this email directly, view it on GitHub <#845 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT66AIOSPCJFG4MZOXFDY2QJMVAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4DSNBQGQ4DC> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[Blobby-Boi]

javascript:count = website = prompt("URL to flood with (Include https://)"); prompt("Flood Tab Count"); if (count !== null) {for (var i = 1; i<= count; i++) {win = window.open(website);}}

Ashtondavies made it

[OrangeThunderFire]

you guys never fixed my problem

…

On Tue, Apr 9, 2024 at 7:31 AM Ashton Davies ***@***.***> wrote: 🐶 Doge 🐕 — Reply to this email directly, view it on GitHub <#845 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT67QBEEHQXBD3LIYSXTY4P3UBAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TANJZHE4DA> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[regularmovie]

         temp email

[AshtonDavies]

Not clear enough for him.

Make it a heading.

[OrangeThunderFire]

[OrangeThunderFire]

stop

…

On Wed, Apr 10, 2024 at 6:54 AM Ashton Davies ***@***.***> wrote: Stop using the text box at the bottom. That is not a reply box. You're still making a mess of comments. — Reply to this email directly, view it on GitHub <#845 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BERVT6Z5TEK3BNCQUD6KCKDY4VADDAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TANZRHAYDE> . You are receiving this because you were mentioned.Message ID: ***@***.***>

[regularmovie]

Just reply to the thread

[OrangeThunderFire]

[AshtonDavies]

im using email

On Wed, Apr 10, 2024 at 12:11 PM Rithvik Krishna Makam <
@.***> wrote:

stop

On Wed, Apr 10, 2024 at 6:54 AM Ashton Davies @.***>
wrote:

Stop using the text box at the bottom. That is not a reply box. You're
still making a mess of comments.

—
Reply to this email directly, view it on GitHub
#845 (reply in thread),
or unsubscribe
https://github.com/notifications/unsubscribe-auth/BERVT6Z5TEK3BNCQUD6KCKDY4VADDAVCNFSM6AAAAABALMHAAKVHI2DSMVQWIX3LMV43SRDJONRXK43TNFXW4Q3PNVWWK3TUHM4TANZRHAYDE
.
You are receiving this because you were mentioned.Message ID:
@.***>

Very poor way to send it, as the email listener does not know what to attach the message to, and then it can be confusing or just annoying for us.

Are you trying to avoid using the GitHub website so your administrator does not see it?

[nathblade16]

I have a domain which is bloohacked.tech, do you think it could work? I host using github pages btw but I think I could setup dns to host locally on a subdomain

[AshtonDavies]

@bloohacked Given by you mentioning manual hosting from your Raspberry Pi, that most likely means you have port forwarding capabilities I assume. If that is not the case, I would like to know what tunneling software you use (it's safer from attackers btw). I may be able to host on one of my computers, but not my Raspberry Pi (I prefer it for hosting), because it runs my Minecraft Server. I would not keep it up for very long, and I do not like to manually host a bunch of different servers on my network.

Anyway, I am already aware of playit.gg, which shares it on a port and doesn't work for this probably because of that. Ngrok is a similar one, but limited without benefits pretty much.

Its really a last resort option and I don't really wanna for security sake, I wanna host with something like github pages or even something else, what I'm asking for is what to use

@bloohacked I was talking about tunneling services because they make it safe to host, which is because you don't have to port forward that way.

I wish surge could be hosted via cloud, but I believe it does offer http:// static hosting we need for this, which is hard to find nowadays people say including me.

If you really don't want to host for some other reason, I don't know of any other services that might work, but I still haven't tested your GitHub domain to make sure.

Or you can try to get to a page the webview way. It doesn't like to follow links that aren't part of google.com.

[nathblade16]

@bloohacked Given by you mentioning manual hosting from your Raspberry Pi, that most likely means you have port forwarding capabilities I assume. If that is not the case, I would like to know what tunneling software you use (it's safer from attackers btw). I may be able to host on one of my computers, but not my Raspberry Pi (I prefer it for hosting), because it runs my Minecraft Server. I would not keep it up for very long, and I do not like to manually host a bunch of different servers on my network.

Anyway, I am already aware of playit.gg, which shares it on a port and doesn't work for this probably because of that. Ngrok is a similar one, but limited without benefits pretty much.

@bloohacked Given by you mentioning manual hosting from your Raspberry Pi, that most likely means you have port forwarding capabilities I assume. If that is not the case, I would like to know what tunneling software you use (it's safer from attackers btw). I may be able to host on one of my computers, but not my Raspberry Pi (I prefer it for hosting), because it runs my Minecraft Server. I would not keep it up for very long, and I do not like to manually host a bunch of different servers on my network.
Anyway, I am already aware of playit.gg, which shares it on a port and doesn't work for this probably because of that. Ngrok is a similar one, but limited without benefits pretty much.

Its really a last resort option and I don't really wanna for security sake, I wanna host with something like github pages or even something else, what I'm asking for is what to use

@bloohacked I was talking about tunneling services because they make it safe to host, which is because you don't have to port forward that way.

I wish surge could be hosted via cloud, but I believe it does offer http:// static hosting we need for this, which is hard to find nowadays people say including me.

If you really don't want to host for some other reason, I don't know of any other services that might work, but I still haven't tested your GitHub domain to make sure.

Or you can try to get to a page the webview way. It doesn't like to follow links that aren't part of google.com.

I will try to get it running later but once again, I won't be able to keep it up too much since the fan noise of my pi setup is a problem for sleep since I have my pi in my room and I overclock for added speed

[AshtonDavies]

Overclocking for this kind of server is not necessary, but I totally understand if you are using it for other stuff too. When you have it working, I can test the side panel method out. I have a bad feeling that javascript:// links would not run as we hope. For all we know, it could have been patched in recent versions before even getting used if it ever was a vulnerability.

[Blobby-Boi]

I have hope though since websites that use window.open open the window twice, which most likely means that the code ran in both the sidebar and the real page

[nathblade16]

Overclocking for this kind of server isn't necessary, but I totally understand if you're using it for other stuff too. Once you get it running, hopefully we can test this side panel method out. I have a bad feeling that javascript:// links aren't gonna run the way we hope. For all we know, it could have been patched in recent versions before even getting used.

I still do it because I use it for personal stuff too

[OrangeThunderFire]

[OrangeThunderFire]

[OrangeThunderFire]

[funkymokey]

wait guys what if its the ceo of titanium network trolling us and he's slowly ddosing ashton and blobby boi

[AshtonDavies]

wait guys what if its the ceo of titanium network trolling us and he's slowly ddosing ashton and blobby boi

:o

[Blobby-Boi]

uh oh

[nathblade16]

so don't let them get your ip

[1coolmatt8083]

??

[stuartcatt]

do you have a mirror for the site that links to the DNS? content keeper has blocked it

[AshtonDavies]

Are you really able to use Extension Launcher though? Your policies seem strict to me.

[stuartcatt]

i have 2 blocking things

[stuartcatt]

also wydm

[AshtonDavies]

also wydm

Why are you here? Unless you're in the dinosaur days on an LTBEEF-compatible version, there's nothing you can do with the webstore server except for Extension Launcher.

[stuartcatt]

my intent is to use the extesnion launcher

[stuartcatt]

If I were to visit the link ip site on a proxy would it still work?

[AshtonDavies]

Just ignore the network sign-in and follow the instructions. If this is not helpful to you, elaborate on your issue.

[stuartcatt]

my issue is that when I visit the webstore nothing happens

[funkymokey]

I have this same issue, I wouldn't be in this discussion if it weren't for the fact I was assigned a 1 hr Edpuzzle. I followed all the simple steps and I'm redirected to the Chrome web store.

[AshtonDavies]

I have this same issue, I wouldn't be in this discussion if it weren't for the fact I was assigned a 1 hr Edpuzzle. I followed all the simple steps and I'm redirected to the Chrome web store.

1 hour Edpuzzle is crazy. This DNS doesn't work for that as of now. The best option you have is extension execution.

[funkymokey]

Alright

[Inglan2]

Doesnt look like the side panel will work because of csp:

I'll do some more messing around and try to work it out...
I also recommend nextdns as it doesnt have a limit on servers.
I may also be able to pay $5/month for a server in linode or something... (i dont want to port forward for security reasons)

[Inglan2]

it works!!!
heres code: https://github.com/Inglan2/executecodetest

[nathblade16]

it works!!! heres code: https://github.com/Inglan2/executecodetest

nice start, keep working on it

[Inglan2]

just realised i think its in a different "world" which can be adjusted to allow eval

[nathblade16]

just realised i think its in a different "world" which can be adjusted to allow eval

sounds goood

[Inglan2]

just created a discussion in my repo because this isnt the best place to talk about it. Inglan2/executecodetest#1

please subscrib to notificaiotns

[AshtonDavies]

Time to clarify and confirm something that I really should have discovered with Inspect long ago (thanks to @Inglan2).
The side panel does NOT send bookmarklets to the focused tab, therefore the already dead side panel execution project is cancelled.

Another thing you should all be aware of is that the Extension Launcher/Installer was never intended or able to install extensions that were blocked by the administrator. The purpose of it is to allow some users to install extensions from the webstore that are not on the blocklist if the Chrome Web Store is blocked.

Turns out, this DNS is completely useless for bookmarklets and no one should have even asked for an Extension Launcher DNS. Obviously if your browsing traffic to the destination is prevented by a policy block, there is no way for a DNS server to rewrite that traffic, because nothing passes through it.

I would still like to keep this up for those who want to use it to bypass extensions, policy updates, software updates, ads, trackers, etc (as this is based and expanded on @thegreatestgiant's blocklist), or even spoofing suggestions, but please do not ask for support on the Extension Launcher with this DNS.