LTVegan - disable forced admin-installed extensions on the latest version of ChromeOS

LTVegan - disable forced admin-installed extensions on the latest version of ChromeOS

Original LTMEAT method found by Bypassi#7037.
LTVegan method found by Ashton Davies.

An alternative method of the LTMEAT exploit based on Alternate Method #1 found by Bypassi(Bypassi#7037) that hangs and refreshes admin-installed extensions from any webpage. This version of the original LTMEAT exploit is also known as LTMEAT [Flood].

This method of LTMEAT does not require debug URLs such as chrome://kill and chrome://hang.

IMPORTANT NOTICE: YOU CANNOT PERFORM THIS EXPLOIT IF YOU ARE NOT RUNNING A CHROMIUM-BASED BROWSER OR DO NOT HAVE ANY OF THE FILTERING EXTENSIONS ON THE TABLE BELOW INSTALLED.

Folder Setup Methods:

Generate and Import Folder (Automated, Recommended)

Background Page URL:
chrome-extension://extension-id-here/_generated_background_page.html

Copy the Extension ID that corresponds to your filtering extension in the table below and paste it into the placeholder textbox on my personal website and press the Generate Folder button below the textbox to generate the folder.

Setup Folder (Manual)
  • Navigate to chrome://bookmarks.
  • Add a new folder to your bookmarks bar.
  • In the folder, add the extension settings URL of the extension you want to freeze and disable.

    chrome://extensions/?id=[extensionid]

  • Paste a page of the extension into the folder such as the generated background or manifest page many times. There must be enough to make browser loading very slow but not crash it entirely.
  • Performing the Exploit:

    Instructions:

  • Close or disable any extra tabs, windows, or extensions to free resources during this process, for the proper result of the exploit.
  • Open the folder that you created in a brand new window. This can be done from its context menu.
  • When tabs begin to respond, close the new window.
  • Open the folder in a brand new window again. This should be done quickly after the window has been closed. The pages should hang automatically, similar to duplicating the tabs from hanged ones in the original methods of the LTMEAT exploit.
  • Toggle and flip the Allow access to file URLs switch in the extension settings page in chrome://extensions to refresh the extension. If the switch is not available for your extension or the extension does not control web traffic, you may be able to skip this step of the exploit.
  • Close the new window.
  • If the effect does not persist, there may not be enough pages to open from the folder in your bookmarks bar.

    This method of the LTMEAT exploit may not work permanently for some filtering extensions, depending on how they are built to run in Chrome.

    Extensions with Manifest V3 are not compatible with any version of the LTMEAT exploit.

    Supported Extensions:

    Extension Name: Extension ID:
    Securly (external) joflmkccibkooplaeoinecjbmdebglab
    Securly (webstore) iheobagjkfklnlikgihanlhcddjoihkg
    GoGuardian haldlgldplgnggkjaafhelgiaglafanh
    LANSchool baleiojnjpgeojohhhfbichcodgljmnj
    Linewize ddfbkhpmcdbciejenfcolaaiebnjcbfc
    Blocksi ghlpmldmjjhmdgmneoaibbegkjjbonbk
    Fortiguard igbgpehnbmhgdgjbhkkpedommgmfbeao
    Cisco Umbrella jcdhmojfecjfmbdpchihbeilohgnbdci
    ContentKeeper jdogphakondfdmcanpapfahkdomaicfa
    Securly Classroom jfbecfmiegcjddenjhlbhlikcbfmnafd
    Hapara kbohafcopfpigkjdimdcdgenlhkmhbnc
    iBoss kmffehbidlalibfeklaefnckpidbodff
    CK-Authenticator G3 odoanpnonilogofggaohhkdkdgbhdljp
    Lightspeed Filter Agent adkcpkpghahmbopkjchobieckeoaoeem
    Lightspeed Classroom kkbmdgjggcdajckdlbngdjonpchpaiea
    InterCLASS Filtering Service jbddgjglgkkneonnineaohdhabjbgopi
    InterSafe GatewayConnection Agent ecjoghccnjlodjlmkgmnbnkdcbnjgden
    Gopher Buddy cgbbbjmgdpnifijconhamggjehlamcif
    LanSchool Web Helper honjcnefekfnompampcpmcdadibmjhlk
    IMTLazarus cgigopjakkeclhggchgnhmpmhghcbnaf
    Impero Backdrop jjpmjccpemllnmgiaojaocgnakpmfgjg
    Mobile Guardian fgmafhdohjkdhfaacgbgclmfgkgokgmb

    This seems kinda useful ngl

    I know, it works on the latest version of ChromeOS, which is v126 right now. It is not patched as of right now.

    Omg is it THE BYPASSI

    Forum keywords go hard :moyai::moyai::moyai: