PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS

PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Printable Version

+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Blackhat • Red Team • Offensive Security (https://hackforums.net/forumdisplay.php?fid=447)
+---- Forum: Blackhat Training (https://hackforums.net/forumdisplay.php?fid=405)
+---- Thread: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS (/showthread.php?tid=6310290)

PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Hackers - Oct 5, 2025

Tested macOS defaults
Chrome 140.0.7339.214
(Official Build) (arm64)

PDF DL:
Spoiler (Click to View)

In the PDF raw file / source, you will be looking for this to test your own message:

Code 
3 0 obj

<<

app.alert ...   This PDF is only available to licensed customers. Please visit example.com for more information!

>>

endobj

The Pastebin link for this PDF is updated so the initial screen can be black/blank when the pop up appears:
> To replicate that on the mega.nz DL link, remove the unrelated obj/endobj block for the URI check further down the code after the alert();

Once the user accepts the alert prompt, the black screen goes away and the yellow box appears.

This will not work on Safari (Version 18.3 tested w/ defaults)
It may not work on certain versions of Windows / certain Chrome builds.

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - ueroroot1 - Oct 9, 2025

also firefox

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Hackers - Oct 9, 2025

(Oct 9, 2025 08:06 AM)ueroroot1 Wrote: also firefox

i didn't check, but wouldn't be surprised.

I'm sure there are also some Chromium based browsers that do this still too.

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Reaper DEEB - Oct 11, 2025

google.com : nice try

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Hackers - Oct 11, 2025

(Oct 11, 2025 05:10 PM)Reaper DEEB Wrote: google.com : nice try

What do you mean?
If you're having an error, can you share your OS & browser version, or any other details related to your specific PDF viewer?

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Reaper DEEB - Nov 15, 2025

what is ur problem

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Hackers - Nov 16, 2025

(Nov 15, 2025 11:11 PM)Reaper DEEB Wrote: what is ur problem

I don't have a problem, can I help you with anything?

EDIT:

I think we're just having a miscommunication. You said "google.com nice try" and I thought you were saying you had a code bug.

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Reaper DEEB - Nov 21, 2025

hehe bro sry I DONT WHY I SAY THAT hehe

RE: PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS - Hackers - Nov 21, 2025

(Nov 21, 2025 05:19 PM)Reaper DEEB Wrote: hehe bro sry I DONT WHY I SAY THAT hehe

hehe no problem