New issue
Advanced search Search tips

Issue 770467 link

Starred by 1 user

Issue metadata

Status: Duplicate
Merged: issue 88953
Owner: ----
Closed: Sep 2017
EstimatedDays: ----
NextAction: ----
OS: ----
Pri: ----
Type: Bug-Security



Sign in to add a comment

Security: How to obtain anyone's password on any site using Google Chrome!

Reported by faaiz.al...@gmail.com, Sep 30 2017

Issue description

With this easy exploit anyone can obtain passwords on any site using Google Chrome's inspect element feature. All you have to do is highlight a censored password and then use inspect element. Change 'type=password' into 'type=text' and then the password will be revealed. This works on all sites from Facebook to Pokemon Vortex! The attachment contains screenshots showing how to execute the exploit.
 
New Tab - Google Chrome 30_09_2017 7_04_37 PM.png
196 KB View Download
New Tab - Google Chrome 30_09_2017 7_05_03 PM.png
132 KB View Download
New Tab - Google Chrome 30_09_2017 7_05_20 PM.png
132 KB View Download
New Tab - Google Chrome 30_09_2017 7_05_41 PM.png
134 KB View Download
New Tab - Google Chrome 30_09_2017 7_05_56 PM.png
170 KB View Download
New Tab - Google Chrome 30_09_2017 7_06_06 PM.png
171 KB View Download
New Tab - Google Chrome 30_09_2017 7_06_35 PM.png
130 KB View Download
record_000001.avi
1.1 MB Download
Works on android devices as well through an HTML editor.
Mergedinto: 88953
Status: Duplicate (was: Unconfirmed)
See https://bugs.chromium.org/p/chromium/issues/detail?id=88953#c1
Project Member

Comment 3 by sheriffbot@chromium.org, Jan 7 2018

Labels: -Restrict-View-SecurityTeam allpublic
This bug has been closed for more than 14 weeks. Removing security view restrictions.

For more details visit https://www.chromium.org/issue-tracking/autotriage - Your friendly Sheriffbot

Sign in to add a comment