LTMEAT [Flood]
Ashton Davies

GitHub Discussion

Alternative method of LTMEAT based on Alternate Method #1 that hangs and refreshes extensions naturally without debug URLs.

Folder Setup

Methods

Generate & Import Folder (Automated, Recommended)

Background Page URL:
chrome-extension:// / _generated_background_page.html manifest.json

Detecting extensions...

Generate Folder


Setup Folder (Manual)
Navigate to chrome://bookmarks.
Add a new folder to your bookmarks bar.
In the folder, add the extension settings URL of the extension you want to freeze.
chrome://extensions/?id=[extensionid]
Paste a page of the extension into the folder such as the generated background or manifest page many times. There must be enough to make browser loading very slow but not crash.

Performing the Exploit

Instructions

1. Close or disable any extra tabs, windows, or extensions to free resources during this process, for the proper result.
2. Open the folder in a new window. This can be done from its context menu.
3. When tabs begin to respond, close the new window.
4. Open the folder in a new window again. This should be done quickly after the window has been closed. The pages should hang automatically, similar to duplicating the tabs from hanged ones in the original methods of LTMEAT.
5. Toggle the Allow access to file URLs switch in the extension settings page to refresh the extension. If the switch is not available for your extension or the extension does not control web traffic, you may be able to skip this step.
6. Close the new window.

If the effect does not persist, there may not be enough pages to open from the folder in your bookmarks.

This method may not work permanently for some extensions, depending on how they are built to run.

Extensions with Manifest V3 require a hanged page to stay open.