Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/e4zyy/project-cve-2026-65351
Vulnerability AnalysisExploitationWeb SecurityRed Teaming
GitHube4zyy/project-cve-2026-65351

Project-CVE-2026-65351

Browser resource exhaustion payload that crashes target systems via memory, GPU, audio, and rendering overload. Designed for authorized security testing and research.

View Repository
3 days agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

BROWSER BOMB / RESOURCE EXHAUSTION PAYLOAD

An analysis and documentation overview of the stress-testing browser script developed by Xer0TLabs & Persephrak Decentralized Syndicate.

WARNING: For educational, research, and authorized testing purposes only. Running this script will immediately freeze or crash the target browser tab, application, or operating system.


1. PROJECT OVERVIEW

This repository contains a comprehensive browser-crashing utility designed to trigger simultaneous hardware and software bottlenecks within modern web browsers. By aggressively targeting the RAM heap, GPU VRAM, audio pipelines, and layout rendering engines, the script creates a catastrophic denial-of-service (DoS) condition on the host machine.

It features targeted optimizations for multiple rendering engines, including Chromium (Blink), Gecko, and WebKit (Safari).


2. CORE BOMB MECHANISMS

The payload executes a multi-pronged attack across the following vectors:

  • Memory Exhaustion (memPressure & blobBomb): Allocates 500 massive Float64Array elements and ArrayBuffers while simultaneously spawning un-revoked 1MB binary Blobs to rapidly deplete system RAM.
  • GPU VRAM Overload (webglBomb): Spawns 100 HTML5 Canvases and forces the graphics card to bind 4096x4096px textures, causing video memory allocation panics.
  • Audio Pipeline Overload (audioBomb): Fires up 200 software audio oscillators with extreme gain multipliers (1000x) to saturate the host OS audio daemon.
  • Render Tree Collapse (filterBomb & domMutate): Injects thousands of hidden elements utilizing extreme 3D transforms, massive CSS blurs, and mix-blend modes to trap the layout engine in infinite rendering loops.
  • Execution Lock (syncCrash & iframeBomb): Deploys an infinite loop to permanently lock the primary JavaScript execution thread alongside 50 self-reloading hidden iframes.
while(true)
  • The Exit Trap (window.onunload): Overrides standard browser closure hooks with a secondary infinite loop, preventing the user from closing or navigating away from the tab cleanly.
  • WebKit / iOS Optimization: Detects Apple mobile user agents to inject rapid preventDefault() touch gesture loops and forced orientation reload cycles to trigger mobile kernel panics.

  • 3. TECHNICAL SPECIFICATIONS & PLATFORM IMPACT

    Engine / PlatformPrimary Crash VectorExpected Outcome
    Chromium (Chrome/Edge)V8 Engine Heap Exhaustion"Aw, Snap! Out of Memory" crash screen.
    Gecko (Firefox)Rendering Pipeline FreezeApp UI lockup / "Unresponsive Script" warning.
    Android SystemKernel Low Memory Killer (LMK)Immediate, silent termination of the browser app.
    WebKit (Safari / iOS)Touch Thread Flood & JSC PanicComplete system lag or forced hardware reboot.

    4. DEPLOYMENT & USAGE

    To analyze the payload, serve the index.html file via a local web server environment (e.g., Python HTTP server, Node.js, Nginx).

    DO NOT open this file directly in your primary browser unless you have saved all active work, as it will cause immediate data loss from unresponsiveness.

    root@kitploit:~
    
    ---
    
    ## 5. DISCLAIMER
    This software is provided "as-is" without any express or implied warranty. The author(s) assume no liability for system crashes, data corruption, or hardware strain caused by running this script on production or personal devices. Always conduct browser security engineering within a dedicated, isolated sandbox or virtual machine environment.
    
    Download Tool