Crosh & VMC Disable Extensions
ading2210 (vk6#7391)

Website Discord

The Crosh terminal must not be blocked by your administrator to perform this exploit. The VmManagementCliAllowed policy must also be enabled.

    Instructions

  1. Back up any data that you have stored on your Chromebook before you powerwash it.
  2. f you are doing the second variation of this exploit, note down any Extension IDs. You may also want to do this if you intend on disabling all of the extensions, since sometimes that will fail and will require you to specify each extension you want to disable.
  3. Powerwash the Chromebook by attempting to enable Developer Mode. You may want to back up important local data on your account profile before performing this step of the exploit.
  4. Sign back in to the Chromebook.
  5. Login to your Google Account as normal, but disconnect from your internet network immediately to prevent the extensions from installing automatically.
  6. You should be logged in into your account, but without any extensions installed due to being offline.
  7. From here, the instructions are split, so follow the instructions for the method that you want to do.
    8. To disable all extensions
  8. Open the Crosh terminal. This can be done by pressing Ctrl+Alt+T.
  9. Run the vmc create-extra-disk --size 1 /home/chronos/user/Extensions command in the crosh window. If it fails with a "file exists" error, use the method to disable specific extensions below.
  10. Connect back to your internet network. The extensions should not install automatically by themselves.
    11. To disable specific extensions
  11. Navigate to chrome://extensions.
  12. Enable your internet, and immediately disable it when an extension is installed.
  13. When an extension is installed automatically, immediately disconnect from your internet network. If you want that extension to be enabled while other extensions are disabled, restart these instructions by powerwashing your Chromebook to try this step again.
  14. Open the Crosh terminal. This can be done by pressing Ctrl+Alt+T.
  15. For each extension that you want to disable, run this command: vmc create-extra-disk --size 1 /home/chronos/user/Extensions/{extension_id}, replacing "{extension_id}" with the Extension ID.
  16. Each command you run in the crosh terminal should look something like this: vmc create-extra-disk --size 1 /home/chronos/user/Extensions/cjpalhdlnbpafiamejdnhcphjbkeiagm.
  17. Re-enable your internet connection, and if you typed/pasted in the Extension IDs correctly, those specific extensions should be blocked from ever being installed again.