Sep 26, 2026, 06:44 PM
Serious inquiries only.
Details:
• Remote code execution in Chrome/Chromium renderer (Windows)
• Confirmed on Chrome 154 - 156 stable range
• Full chain: renderer RCE -> Mojo/IPC sandbox escape -> SYSTEM-level capability
• Trigger: drive-by (malicious page) or crafted content in renderer
• No user interaction beyond visiting the page/loading content
• Pure JS + native shellcode stages
• In-memory execution, no disk drop required
• Includes loader, stage-0, sandbox escape module, and basic C2 stub
Tested on:
- Windows 10 22H2
- Windows 11 23H2/24H2/25H2
- Chrome stable and extended stable channels in the stated range
Not claimed against fully locked-down enterprise policies or Application Guard unless separately discussed.
Delivery:
- Encrypted archive (age / GPG)
- Offsets and notes for the tested builds
- 48h support window after delivery
- Sandbox escape stage binary-only
Proof-of-concept video available after serious inquiry.
Escrow/middleman is accepted.
Price: $10k
Telegram Contact: @xynapsee
Details:
• Remote code execution in Chrome/Chromium renderer (Windows)
• Confirmed on Chrome 154 - 156 stable range
• Full chain: renderer RCE -> Mojo/IPC sandbox escape -> SYSTEM-level capability
• Trigger: drive-by (malicious page) or crafted content in renderer
• No user interaction beyond visiting the page/loading content
• Pure JS + native shellcode stages
• In-memory execution, no disk drop required
• Includes loader, stage-0, sandbox escape module, and basic C2 stub
Tested on:
- Windows 10 22H2
- Windows 11 23H2/24H2/25H2
- Chrome stable and extended stable channels in the stated range
Not claimed against fully locked-down enterprise policies or Application Guard unless separately discussed.
Delivery:
- Encrypted archive (age / GPG)
- Offsets and notes for the tested builds
- 48h support window after delivery
- Sandbox escape stage binary-only
Proof-of-concept video available after serious inquiry.
Escrow/middleman is accepted.
Price: $10k
Telegram Contact: @xynapsee
