TGViewer
The Bug Bounty Hunter The Bug Bounty Hunter @thebugbountyhunter · 51K subscribers
Post #10695 3.71K
BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension

https://forever.security/blog/bragjack-attack-hijacks-every-browser-agent/
Forever BragJack [Technical Overview]: How We Hijacked Top 5 Browsers' Internal Agents With Just One Single Extension · Forever Security BragJack attack (discovered by Forever Security) allowed ordinary extensions to hijack the internal browser agent of Comet, Chrome, Edge, Opera, and Claude in Chrome
  • ❤ 3
  • 🔥 1
Open in Telegram All posts from @thebugbountyhunter
More from @thebugbountyhunter
  1. Sep 22, 2026SharePoint CVE-2026-65660: From Anonymous Access to Pre-Auth RCE via EditingPageParser Typ…
  2. Sep 19, 2026ROOT Tesla OS on QEMU Part 2 :Debugging + fixing https://cn0xroot.wordpress.com/2026/09/20…
  3. Sep 19, 2026ROOT Tesla OS on QEMU Part 1 :unpacking https://cn0xroot.wordpress.com/2026/09/19/root-tes…
  4. Sep 19, 2026geminiHunter Find and assess exposed Google Gemini API keys in web assets and Android apps…
  5. Sep 18, 2026Click2Shell: Preauth WordPress Core Theme Preview Injection to RCE Chain https://pwn.ai/bl…
  6. Sep 18, 2026Hacking OpenAI A heap overflow and SSO misconfiguration to compromise OpenAI internal repo…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →