Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Tools/GitHubGitHub/shihongsu/netsec-cve-2023-4357
Vulnerability AnalysisExploitationWeb Application ExploitationLearning & EducationLabs & Practice
GitHubshihongsu/netsec-cve-2023-4357

NetSec-CVE-2023-4357

Reproduces CVE-2023-4357 in Google Chrome to demonstrate XML/XSLT-based file access bypass, with analysis and proof-of-concept for educational purposes.

View Repository
113h 16m agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Network Security Project — CVE-2023-4357

Overview

This project is a final project for a Network Security course.

The project focuses on CVE-2023-4357, a vulnerability affecting Google Chrome versions prior to 116.0.5845.96. The vulnerability is related to the handling of XML/XSLT and can allow a malicious document to bypass intended file access restrictions.

Reproduce

I reproduced the vulnerability in a virtual machine using an older version of Google Chrome and analyzed how the XML document triggers the vulnerable behavior.

The provided XML/SVG file is used to reproduce the vulnerability and demonstrate unauthorized access to /etc/passwd.

Environment

  • VirtualBox
  • Google Chrome 114.0.5735.90
  • Linux virtual machine
Download Tool