Home Upgrade Search Memberlist Extras Hacker Tools Award Goals Help Wiki Contact

PDF Injected Javascript Alert in Chrome v140x (and below) ~ macOS


[Image: xrieLPG.png]

Tested macOS defaults
Chrome 140.0.7339.214
(Official Build) (arm64)

PDF DL:
Spoiler (Click to View)


In the PDF raw file / source, you will be looking for this to test your own message:

Code
3 0 obj
<<
app.alert ...   This PDF is only available to licensed customers. Please visit example.com for more information!
>>
endobj



The Pastebin link for this PDF is updated so the initial screen can be black/blank when the pop up appears:
> To replicate that on the mega.nz DL link, remove the unrelated obj/endobj block for the URI check further down the code after the alert();

Once the user accepts the alert prompt, the black screen goes away and the yellow box appears.

[Image: vURduKM.png]

This will not work on Safari (Version 18.3 tested w/ defaults)
It may not work on certain versions of Windows / certain Chrome builds.
also firefox
(Oct 9, 2025 08:06 AM)ueroroot1 Wrote:  also firefox

i didn't check, but wouldn't be surprised.

I'm sure there are also some Chromium based browsers that do this still too.
google.com : nice try
(Oct 11, 2025 05:10 PM)Reaper DEEB Wrote:  google.com : nice try

What do you mean?
If you're having an error, can you share your OS & browser version, or any other details related to your specific PDF viewer?
what is ur problem
(Nov 15, 2025 11:11 PM)Reaper DEEB Wrote:  what is ur problem

I don't have a problem, can I help you with anything?

EDIT:

I think we're just having a miscommunication. You said "google.com nice try" and I thought you were saying you had a code bug.
hehe bro sry I DONT WHY I SAY THAT hehe
(Nov 21, 2025 05:19 PM)Reaper DEEB Wrote:  hehe bro sry I DONT WHY I SAY THAT hehe

hehe no problem


Possibly Related Threads...
Thread / Author Replies Views Last Post
by DOOOMMar 15, 2021 06:17 AM 2 110 Mar 15, 2021 06:17 AM
Last Post: 3847539udfsf