Browser Crash Tool - Kali

Overview

This tool exploits a vulnerability in iOS WebKit (CVE-2020-27950) using Metasploit’s webkit_backdrop_filter_blur auxiliary module. But seems it work on all browsers after some testing ,It crashes the target browser by loading a crafted web page. The tool also uses ngrok to create a publicly accessible link to the malicious page, making it easy to send to a target.

Disclaimer: This tool is designed solely for educational purposes and to assist cybersecurity professionals in understanding browser vulnerabilities and testing them in a controlled environment. Misuse of this tool for unauthorized or malicious activities is strictly prohibited.

By using this tool, you agree to comply with all applicable laws and ethical guidelines. The creator of this tool assumes no responsibility for any damage or legal consequences resulting from its misuse.

Always obtain proper authorization before testing any system.

https://github.com/user-attachments/assets/1eb73bec-cc79-4f0a-8859-70e4a4d7db5a

Requirements

• Kali Linux
• Metasploit Framework
• ngrok (for creating public URLs)

Features

• Automatically configures Metasploit and runs the WebKit DoS exploit.
• Integrates with ngrok to generate a public URL for easy access.
• Checks for ngrok installation and handles exceptions gracefully.
• User-friendly with informative messages and error handling.

Installation

1. Install Metasploit: If Metasploit is not installed, you can install it with:
   root@kitploit:~

   sudo apt install metasploit-framework
   

2. Install Ngrok: If ngrok is not installed, you can install it with:
   root@kitploit:~

   sudo apt install ngrok
   
   

3. Authenticate Ngrok using your token:
   • Sign up for a free Ngrok account on the Ngrok website.
   • Obtain your authentication token from the Ngrok Dashboard.
   • Authenticate Ngrok with the following command:
     root@kitploit:~

     ngrok authtoken YOUR_AUTH_TOKEN
     

     Replace YOUR_AUTH_TOKEN with the token you obtained from the Ngrok Dashboard.