LTMEAT Patch & Workaround [v115+] #671
Replies: 19 comments 134 replies
-
|
bud, your school admin disabled chrome://kill/hang. its literally something they could have done for as long as i can remember. also, its not a "google mistake" its a "your school admin is stupid" thing. |
Beta Was this translation helpful? Give feedback.
-
|
Nope, I know what I'm doing. I tested on Chrome OS 111 and it still worked, meaning the patch was added with v115 given that it is also not in the policy. There's a reason I wrote "blocked/blockable." And FYI, all exploits are Google mistakes. |
Beta Was this translation helpful? Give feedback.
-
|
Its not a school admin thing. Happening to me too. I do think its a patch. Unfortunate really. |
Beta Was this translation helpful? Give feedback.
-
|
115 isn't even released to the main channel so you should be good for now. |
Beta Was this translation helpful? Give feedback.
-
|
Unless schools got some sort of early copy it appears to have come out. |
Beta Was this translation helpful? Give feedback.
-
|
Alright. Turns out im on 108. |
Beta Was this translation helpful? Give feedback.
-
|
Screen recording 2023-05-25 9.42.04 AM.webm |
Beta Was this translation helpful? Give feedback.
-
Going to this link gets around that or you can right click and refresh. Supports other districts now so you can create your own link. |
Beta Was this translation helpful? Give feedback.
-
|
how do you use the link? |
Beta Was this translation helpful? Give feedback.
-
|
@doyourclanwars On the page you need to make your own link for your district and paste it into the box at the top and open the window and click start quiz. It'll save your link to localStorage btw. It's very easy and my friends at school last year loved this easy exploit I found. Unfortunately, it's patched in 111 because it had bad security to keep my district from seeing and reporting it. |
Beta Was this translation helpful? Give feedback.
-
|
how do I find the background of the extension?? |
Beta Was this translation helpful? Give feedback.
-
No worries! Just follow the Chrose link at the top of this discussion and there's a formula in those directions. In the future, I will probably update that page to copy the tabs into the clipboard so you just have to paste into the folder once and then the setup will be easier. (Recent discovery) |
Beta Was this translation helpful? Give feedback.
-
|
Well, I just got a workaround for the kill command. Tested with Hapara Highlights, I can spam activate it to flood tabs until it lags so much making Chrome want to kill it, and then I click "Exit Page" and it kills the extension for a moment like we want. Now if only we find a way to trigger hang this can be solved for when the update comes around. :) |
Beta Was this translation helpful? Give feedback.
-
|
Oh god, a bit ago I copy/pasted a couple hundred thousand new tabs in a folder. Freezes the whole computer. |
Beta Was this translation helpful? Give feedback.
-
|
I used it on iboss on 120 and it worked bu I coundn't search anything only go to links |
Beta Was this translation helpful? Give feedback.
-
Make sure to use the complete method. This thread was the early version. |
Beta Was this translation helpful? Give feedback.
-
|
where is the complete method? |
Beta Was this translation helpful? Give feedback.
-
Right below this section, or with this link: #671 (comment) |
Beta Was this translation helpful? Give feedback.
-
|
Use the task manager to kill, and use chrome://shorthang to hang. |
Beta Was this translation helpful? Give feedback.
-
|
Task manager isn't blocked for me, and shorthang and every other except kill and normal hang are still working for me. |
Beta Was this translation helpful? Give feedback.
-
|
You all have seriously got to read the top message in this discussion. It's a dev update, and you will eventually have it. |
Beta Was this translation helpful? Give feedback.
-
|
I am on the newest version of chrome buddy. |
Beta Was this translation helpful? Give feedback.
-
|
And I am above the latest version, buddy. |
Beta Was this translation helpful? Give feedback.
-
|
In all seriousness, I have made it clear that I am talking about an upcoming update, and people in this discussion don't have the brains to understand update channels. |
Beta Was this translation helpful? Give feedback.
-
Solved!Forget the kill workaround. I was thinking the new method would have to be complicated, but that was where the baby method came in handy eliminating killing the extension with the Exit Page dialogue. When your Chromebook has received the patch on the stable channel:
This is the LTMEAT Flood Method, and also unofficially called Alternate Method # 2. Enjoy a much longer life of LTMEAT! IF THIS IS NOT WORKING FOR YOU:
|
Beta Was this translation helpful? Give feedback.
-
|
@AshtonDavies K, tested it on version 119.0.6045.214 and it does work, for 3 minutes (I timed it) I don't know why, I made sure to not close any of the tabs. Am I doing something wrong? Edit: Nvm I was being stupid, didn't read other comments. I will try to find a way to maximise the time that the extension is hanging for |
Beta Was this translation helpful? Give feedback.
-
What extension? That matters too, because different extensions are built differently and some can restart on their own with this LTMEAT method. Also, yes you should definitely maximize your folder capacity to at least 1000. I literally don't have explanations for the strange behaviors of this exploit, but the general necessary tab amount seems to increase. Originally it was 600, then 800, now 1000. Strange isn't it. |
Beta Was this translation helpful? Give feedback.
-
|
I use securly, I'm testing out file sizes and around 1000 seems the maximum before it crashes. Game sites like arras io prompt to leave the site and if you say cancel it doesn't get blocked indefinintly (until you reload) I tried pressing the x to stop the reloading of discord but what I see it dosen't work |
Beta Was this translation helpful? Give feedback.
-
|
how did the website calculate it? asking because the website doesn't seem to exist as it will give me "This site can't be reached" but also because I am curious. |
Beta Was this translation helpful? Give feedback.
-
|
Beta Was this translation helpful? Give feedback.
-
|
New Question: Is Chrome Version OS 116 working? |
Beta Was this translation helpful? Give feedback.
-
|
I figured how to make it last forever
…On Wed, Sep 6, 2023 at 3:01 PM Ashton Davies ***@***.***> wrote:
The hack does not work forever, any updates?
Either you did it slightly wrong or the extension isn't compatible with
this method, like hapara for instance which fixes itself no matter what.
—
Reply to this email directly, view it on GitHub
<#671 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AV5367T2FVDDCICLWP47HKDXZDJCPANCNFSM6AAAAAAYMSKDNI>
.
You are receiving this because you commented.Message ID:
***@***.***>
--
*Sam Lewis*
*Founder and Lead Developer*
*BetaCat*
|
Beta Was this translation helpful? Give feedback.
-
|
It is impossible to make it last forever, as upon a restart the extension will update and the hang will "unhang" ig |
Beta Was this translation helpful? Give feedback.
-
|
yes I know
…On Thu, Sep 7, 2023 at 1:01 AM Player 529 ***@***.***> wrote:
It is impossible to make it last forever, as upon a restart the extension
will update and the hang will "unhang" ig
—
Reply to this email directly, view it on GitHub
<#671 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AV5367VAHQ5U6KD4MSNMHE3XZFPNFANCNFSM6AAAAAAYMSKDNI>
.
You are receiving this because you commented.Message ID:
***@***.***>
--
*Sam Lewis*
*Founder and Lead Developer*
*BetaCat*
|
Beta Was this translation helpful? Give feedback.
-
|
What extension are you attempting to freeze? |
Beta Was this translation helpful? Give feedback.
-
116 is experimental for doing this. I couldn't get it working on that one myself last I tried, but other than that, Lightspeed does work for this. |
Beta Was this translation helpful? Give feedback.
-
|
We got a new problem,... Light Speed is now completely overhauling their system and now produced a brand new extension that can block these manifest.json files, not only that, but main computers that you have that you installed any emails are compromized by this new launch of "Lightspeed Device Insider Agent" This not only is a risk for all people on LTMEAT, but also is a true problem for people who have their rights, as the original lightspeed can't identify serial numbers. now, they can, and they can send emails directly to the device's serial number to know that it is malfunctioning. Current Lightspeed Permissions: New "Device Insider Permisions" |
Beta Was this translation helpful? Give feedback.
-
Thank you. It should be: chrome-extension:njdniclgegijdcdliklgieicanpmcngj/_generated_background_page.html |
Beta Was this translation helpful? Give feedback.
-
|
@AshtonDavies what do I do with this again? I can't use chrome://hang/ or chrome://kill/ |
Beta Was this translation helpful? Give feedback.
-
Uhh, do the workaround you're literally on. |
Beta Was this translation helpful? Give feedback.
-
|
github is not blocked for me right now |
Beta Was this translation helpful? Give feedback.
-
|
My school has both, plus a whole bunch of others. Thats why my USB hack is going to shove it up lightspeeds ass. |
Beta Was this translation helpful? Give feedback.
-
|
We seriously need to consider this for Lightspeed Device Insider Agent whatever you do, petition to get this lightspeed device insider agent extension out of your chromebooks cuz I just got a email from [email protected] to stop messing around. |
Beta Was this translation helpful? Give feedback.
-
You're probably on version 116 or higher then. |
Beta Was this translation helpful? Give feedback.
-
Blud is talking straight into the discussion for a workaround and doesn't even know. |
Beta Was this translation helpful? Give feedback.
-
|
Guys, @AshtonDavies @doyourclanwars Here's an new update on what they can do:
also, if I go into site settings, on permissions, there's some permissions that is allowed without asking us, and that's a problem: the things that they allow is...
I do not know what the "f" is going on, but I don't want my payment method to get stolen. My friends that wants this blocked are also having issues with this extension has it's going on. I also know that Go guardian is working with Formative for a new contract that makes you see any edits or "copy/pasted from other websites" thing using AI improvement and 24/7 goguardian access when you open formative, so I don't think any exploits will now remove go guardian. There's also the point where lightspeed might be selling our contact / payment info to third party sign ins, which by the way, administrators don't use since it's their ownership- meaning that other third party sign ins, such as LIGHT SPEED can go INTO YOUR CHROMEBOOK and can "Eject" storage FILES and see your downloads and passwords and stuff. |
Beta Was this translation helpful? Give feedback.
-
|
@AshtonDavies I can't. I tried LTMEAT, LTBEEF, tried every proxy, dextensify, but it doesn't block it. not even a second. |
Beta Was this translation helpful? Give feedback.
-
|
downgrading doesn't work now |
Beta Was this translation helpful? Give feedback.
-
|
|
Beta Was this translation helpful? Give feedback.
-
|
yeah that backfired. |
Beta Was this translation helpful? Give feedback.
-
|
My school uses lightspeed. Plus, A whole lot of other extensions |
Beta Was this translation helpful? Give feedback.
-
|
it looks like it is mostly patched in 116 anyway
…On Tue, Sep 12, 2023 at 12:51 PM Danieltjy1186 ***@***.***> wrote:
yeah that backfired.
—
Reply to this email directly, view it on GitHub
<#671 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AV5367URQOOCLRR3XVZRTGLX2COLZANCNFSM6AAAAAAYMSKDNI>
.
You are receiving this because you commented.Message ID:
***@***.***>
--
*Sam Lewis*
*Founder and Lead Developer*
*BetaCat*
|
Beta Was this translation helpful? Give feedback.
-
|
technically no! https://jamal2.bypassly.co/ got you bro |
Beta Was this translation helpful? Give feedback.
-
|
Thats a proxy I think, also why is the the main website password protected? |
Beta Was this translation helpful? Give feedback.
-
|
insecurly works the best
…On Thu, Sep 28, 2023 at 3:26 PM Ashton Davies ***@***.***> wrote:
https://quartz-flat-feeling.glitch.me/dextensify/ dexensify is better buds
Yo does it actually disable extensions with the memory leak trick or just
stop them.
And I would say LTMEAT is better just because it stays working on it's own
unlike Dextensify.
—
Reply to this email directly, view it on GitHub
<#671 (reply in thread)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AV5367TNLSLINLUTEIJVUPDX4XMPFANCNFSM6AAAAAAYMSKDNI>
.
You are receiving this because you commented.Message ID:
***@***.***>
--
*Sam Lewis*
*Founder and Lead Developer*
*BetaCat*
|
Beta Was this translation helpful? Give feedback.
-
|
Yea, only for securly tho.
…On Thu, Sep 28, 2023, 4:31 PM minystreem56 ***@***.***> wrote:
insecurly works the best
On Thu, Sep 28, 2023 at 3:26 PM Ashton Davies ***@***.***>
wrote:
> https://quartz-flat-feeling.glitch.me/dextensify/ dexensify is better
buds
>
> Yo does it actually disable extensions with the memory leak trick or
just
> stop them.
>
> And I would say LTMEAT is better just because it stays working on it's
own
> unlike Dextensify.
>
> —
> Reply to this email directly, view it on GitHub
> <
#671 (reply in thread)>,
> or unsubscribe
> <
https://github.com/notifications/unsubscribe-auth/AV5367TNLSLINLUTEIJVUPDX4XMPFANCNFSM6AAAAAAYMSKDNI>
> .
> You are receiving this because you commented.Message ID:
> ***@***.***>
>
--
*Sam Lewis*
*Founder and Lead Developer*
*BetaCat*
—
Reply to this email directly, view it on GitHub
<#671 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/BAHLP5O73J6YCMXGCFVS3NLX4XNATANCNFSM6AAAAAAYMSKDNI>
.
You are receiving this because you commented.Message ID:
***@***.***>
|
Beta Was this translation helpful? Give feedback.
-
|
I have a solution.I have recently got into hacking, I think this doing an XSS attack should work if you can’t open them.Here’s the link you can use if you can’t use the bookmarks B and C (plus I actually made it so that you don’t have to do anything but click on my link and disable extensions to your heart’s content. Here’s the link, it launches an XSS attack to redirect the page to the right places to make this explicit work |
Beta Was this translation helpful? Give feedback.
-
|
random question about javascript I don't really get what parent and child are for, what does that even mean ("parent & child")?what does it do? when would you use it? can I have an example code? can someone please explain, I'm sorta new to this and need help. |
Beta Was this translation helpful? Give feedback.
-
|
*ps, I'm trying to reconstruct LTBEEF to work on v107 and above and I'm pretty new to hacking using actual javascript (I'm more of a script kiddy, LOL) and would like to up my hacking skills. |
Beta Was this translation helpful? Give feedback.
-
|
and to make it work even if schools block bookmarklets (like my school did :( ) |
Beta Was this translation helpful? Give feedback.
-
You can't bypass that patch by editing the code, unfortunately. The Chrome management disable command checks if it's managed and denies if it is. |
Beta Was this translation helpful? Give feedback.
-
Parent is a term for the container or object holding or in charge of another called the child. For example, in web JavaScript, elem.getParentElement returns the object that contains that element. |
Beta Was this translation helpful? Give feedback.
-
Beta Was this translation helpful? Give feedback.
-
|
Not only does breaking a website solve absolutely nothing, but your school/district has the right to read any browsing activity on their devices that you're borrowing and on their registered student accounts. But, if it were a personal cell phone or laptop on a personal account, then it would certainly be stealing information, as them kiddos keep claiming. |
Beta Was this translation helpful? Give feedback.
-
|
And yes, My normal account is connected because I dont want to take my laptop to school because so many kids keep putting their hands on it. |
Beta Was this translation helpful? Give feedback.
-
|
Also, I wonder what will happen if I install chrome os flex on the school chromebook XD |
Beta Was this translation helpful? Give feedback.
-
|
That actually would be funny. |
Beta Was this translation helpful? Give feedback.
-
|
Hmm. Would the school like it if I install a 4090 on their chromebook as well? XD |
Beta Was this translation helpful? Give feedback.
-
|
Some more ram as well, hell, let me just remake the entire chromebook and cram it back into the same case. They'll be so confused after im done at the end of the year. |
Beta Was this translation helpful? Give feedback.
-
|
Ah yes... Illegal activities... Average tuesday... I guess... |
Beta Was this translation helpful? Give feedback.
-
|
Yup. Check out what I also added to the discussion. |
Beta Was this translation helpful? Give feedback.
-
Ok, a work around is being developed.I have been developing a fake jailbreak hack for school chromebooks, and it actually works, well will work if I finish it.
I hope to finish this by the end of the year, but first I have to go get some more USBS since most of them keep blowing themselves up due to some of the programs I've been running LOL. This is from one of the discussions I started. |
Beta Was this translation helpful? Give feedback.
-
|
I do support this, but I hate to break it to you: the school Chromebooks are owned, well, by the school. What you're doing is considered illegal because it is the school's property. I know that this is more of a protest, but my argument still stands. |
Beta Was this translation helpful? Give feedback.
-
|
just buy your own chromebook at this point |
Beta Was this translation helpful? Give feedback.
-
|
Yeah, besides we already have Sh1mmer alternatives. |
Beta Was this translation helpful? Give feedback.
-
|
yo ashton any new stuffthat i can use to unblock my chromebook |
Beta Was this translation helpful? Give feedback.
-
|
There are options in this repo such as Corkey and OP Crosh that can disable extensions. This still isn't patched though. Compatibility can be hard to figure out around here if you don't know patch versions and stuff. |
Beta Was this translation helpful? Give feedback.
-
|
how do i do it?? i cant find a way to get the extension background :( im pretty new to this |
Beta Was this translation helpful? Give feedback.
-
|
@xeearant i don't know what extension you use but if you go to chrome://extension and press 'details' you can find the id (the thing after "?id=") and you can put the id into chrome-extensions://idgoeshere/manifest.json |
Beta Was this translation helpful? Give feedback.
and others
-
LTMEAT Flood Method
No commands of any type are required.INSTRUCTIONS OR Exploit Page
Beta Was this translation helpful? Give feedback.
All reactions