Saturday 7 October 2023

Meet Babu Muddrappa, the 29 year old auto driver from Bengaluru.

On his way home Babu found a pregnant woman in labour and crying for help on Whitefield road.

He took that unknown pregnant woman to the hospital for delivery. The woman was in a lot of pain so he just filled up the admission forms with his details.

Babu waited till the woman gave birth to a baby girl. But the baby was 2 months premature, weighing just 850 grams and suffered from severe breathing problems.

He was asked to run the infant to Bowring Hospital for treatment and so he did.

However, when he came back to the hospital, he found out that the woman had fled.

Babu felt bad for the newborn and decided to adopt the girl and raise her as his own child. He even took care of the hospital bills.

He took care of the food and medicines and he did everything that was required to keep the baby girl healthy. But as events turned, her health deteriorated and the baby died after 18 days in the hospital.

The auto drivers in India, especially in the metropolitan cities, are infamous for charging absurd amount of money and most importantly, refusing a ride.

However, even amidst their notoriety, there exist drivers like Babu Muddrappa who set an example of striking a balance between one’s duty and humanity.

People like him make the world a better place to live in! 

 

What is the biggest culture shock you have ever faced?

My husband & I planned a trip to Bhutan 5-6 years back. All the bookings , hotel & travel etc were done via some travel agent. On reaching Phunet sholing(it’s border town between India-Bhutan border,)we were received by the travel agent who had planned our travel. He told us that our driver would come and pick us in some time and will be there with us for next 5-6 days of travel. In sometime car stopped by and we were pleasantly surprised to see our driver, 32-33 year old woman, neartly dressed in Bhutanese dress, well mannered and super confident. She was from Paro(A Citi in Bhutan) , which was part of our travel iternary. We got to visit here ancestral home which she inherited from her mother, which she told is common in Bhutan for daughters to inherit parental house. Apart from that in most places be it hotels, restaurants, shops almost everywhere women seems to be taking lead. Many of the drivers and tour guides were women. This was a pleasant and powerful display of matriarchy. Before our trip, I have heard of cleaniness, peaceful and sustainable tourism experiences about Bhutan but this dimension I was unaware of. Needless to say it was a cultural shock but I totally loved it.

Here is a sweet memory from the wonderful time..

 

What is it like to earn more than Rs 5 crores per year? What do you do and how did you start?

I still drive my Hyundai Grand i10, which I bought in 2015 and lead a very humble lifestyle.

Today, I am fortunate to earn well, but I don’t see much change in life with money. The only difference in my personality is that I try to value my time over everything else. I would not think twice about investing money on anything which saves time or gives convenience, as it results in more efficiency at work.

I am just focused on building an empire that I always wanted to build. With money in the bank, the greed for making money has almost gone and whatever I do, is all about creating an impact on society. Because after a few crores, money is just another number and it doesn’t give any eternal happiness.

Before I share my story, let me introduce myself. I am Founder & CEO of AstroTalk, which provides online Astrology consultation on call/chat. Astrology is an industry which has a huge demand but Astrologers/ companies in this field were trying to loot people by intimidating them. I started AstroTalk in October 2017 and within a span of 2 years, we became the market leaders (by Revenue) as we just did one thing right - “Did the business honestly.”

Here is my story:

I come from a lower-middle-class family and got graduated in B.Tech from Punjab Engineering College, Chandigarh in 2011. Through campus placement, I got into Nomura Group (Investment Bank of Japan) in Mumbai, Maharashtra, India and started my career there. I wanted to quit and start something in the field of Ayurveda but it was difficult to leave a job which promised a comfortable life.

Meanwhile, I fell in love with a gorgeous lady, who had an immaculate storytelling technique and a great sense of humour. Just imagine how powerful that combination is. People talk about having common interests with your partner, let me tell you, all that is nothing compared to having a partner who can tell you any situation in a form of a beautiful story with a pinch of sarcasm. I could just sit and listen to her all day. There could be nothing more erotic than the beautiful conversation we used to have, around those stories.

However, like any other love story, we had our differences. She belonged to an upper-class family and I hailed from a lower-middle-class background. My daily expenses on meals were less than her single cup of coffee at Starbucks India and she would usually have it every day (with a cookie). Having said that, she had always been very nice and we had no issues related to our backgrounds, other than she trying to push me to earn well.

I was quite satisfied with my salary of 37k per month, as I had no desires and was enjoying the financial freedom for the first time in my life. And this was so much into my DNA that I could never pay heed to her explanations of earning well. She wanted me to work hard and progress in my job or start something along with my job, but I was just in the full-time job of being in love.

For me, love was enough to keep the two people together and lead a happy life but she tried to explain to me why love was not enough, which made no sense to me. The difference of opinion brought some tension in her head but I was never bothered as I thought she was immature and would understand eventually. Moreover, I was so happy being with her that I felt I was the most powerful person in this world as I loved someone, who loved me back. There was no reason and I thought I was leading the best life as I was earning well and had achieved the happiest emotional state as well. Aur kya chahiye bhai?!

And when I started thinking, “apun hi bhagwan hai,” that’s when God thought of showing me my place.

She was quite irritated by my sense of satisfaction in life and one day, while I was riding my bike on a road with a lot of potholes, filled with rainwater, and an auto-driving past us spilt 10 ml water on her feet.

“Stop. Stop, or should I jump,” she shouted when I was focusing on riding over the little zig-zag road on the sides of potholes. Before she could get angrier, I quickly stopped on the side of the road. She got down and came in front.

“How many times have I told you to take a cab? But you need to bring your useless bike to save money,” she continued and I would not dare to argue at that point, as I could see she had a long story to yell. In my opinion, I would have done anything to stop her but I knew any action at that point, could get an equal or worse reaction.

As soon as she took a pause, I apologised and told her to take a cab and also promised her that I would sell my bike and buy a car (like you tell a stubborn infant). But she was in no mood to trust my words that day and was filled with anger, obviously because of that 10 ml of water :| (I grew up enjoying jumping in potholes to spill water on each other and I never thought it would become such a big deal to someone, someday).

My father drives a Mercedes and your whole family has not seen a car. You are so lucky that I still love you…” she shouted in anger and as soon as I heard those words…………..my mind got blank and it felt like someone has pressed audio off in life. Everything was moving around me but there was no noise to my ears. Maybe my nerves were still processing a reaction to that situation and my system got hanged.

After shouting for a while, she held me from my shoulder and shook me. I came back to reality and when I looked at her, I didn’t see her the way I used to. I would always notice a beautiful face with a dimple on the left cheek and the mole on her cheek would go inside that dimple when she would smile, but that time I noticed pimples on her face. My eyes were refusing to see the beauty and focused on everything that was wrong. I felt like I was standing with a stranger. She realised that she had said wrong things but my silence was making her even more uncomfortable.

“I am sorry, please don’t be angry. I had a little fight with my flatmate and that was running through my head,” she tried to make an excuse. She would do that every time and I would believe her but that time I could read her face, she was lying to me. “Please speak something,” she almost begged but I was blank and didn’t know how to react.

“I am so sorry,” she said again.

“Can I go home? Let’s talk tomorrow,” I asked her without reacting anything to her apologies and wanted to run away from that situation as I didn’t know how to react. When I used to see her a little sad, I would do anything to cheer her up and at that time, I could feel she was very uncomfortable after saying things in anger, but my mind was not allowing me to console her. At that moment, my brain was more powerful than the heart (maybe for the first time, since I started dating).

“I knew you were not in a mood to go out. Now you have got an excuse also. Well done!,” and that’s when I realised she was not done with spilling foul words. I was still thinking of an answer to that and she walked towards her place. She had done that walk away thing and got sympathy before and I would keep running behind her every time but that time I could understand it was all for sympathy.

So, I started my bike and left without looking back. A lot of emotions, questions, memories, hatred went through my head but when I reached home, I made a promise to myself that I would work my ass off and not settle for anything less in life. I thought success was the only answer to what I went through that day.

The next day, I quit my job at Nomura without any business plan and decided that I will do whatever it takes to achieve success. But who thought that achieving success could be even more painful?!

(We did try to make things work but I became very laid-back in putting efforts to make the relationship work and she also thought that I was very immature to resign and leave the job without a plan, and it only became worse and ended in a breakup)

I served my notice and left Mumbai in November 2013. I moved to my hometown (Bathinda, Punjab, India) to start something in Ayurveda with my grandfather as he used to practice medicine and had cured many patients for Appendicitis, Hepatitis, Stone, Piles, etc. However, I had taken it for granted that he was my grandfather and I could go there any day and make his products reach to masses, and I was massively wrong. When I spoke to him about the plan, I realised that our thoughts did not match and there was no common ground on which we could work together.

I left my job; I was going through the after-effects of a breakup from my first relationship (If you know how difficult it is to handle the first breakup); And the only hope of starting up, had gone down the gutter. I was even more devastated. And to add to it, my relatives made my life even worse as I was staying with my parents, doing nothing at 25.

After that, I tried to start a few things in desperation but I was not emotionally stable. And as nothing was working out and my savings were getting exhausted, I reached a state of depression.

After 7 months of staring at the walls of my house, my friend Aman started calling me after his office and would speak to me for 2–3 hours, to convince me to find a job and he made me believe that everything will be hunky-dory again. I tried to apply for jobs but my CV was not shortlisted by any company due to a gap in my work experience. Finally, a startup called me to complete a project in a month and their budget was half my salary. I agreed and went to join them, as I thought I will find a permanent job in that month.

This startup had asked me to come by a flight and take a reimbursement after joining, but when I joined, they said it will take 15 days to approve and therefore it shall be credited in my salary after one month. I had 17k in my account when I left home and had spent 11k on the flight. No way I could survive in Mumbai with 6k.

So, I decided to eat cheap food and find a cheap place to live in. All my friends had left Mumbai by that time and I had no place to share an apartment. But one of them asked me to go stay at his friend’s place and when I went there I saw there were way too many people in that flat already and had no extra bedding.

(Lunch - something like this)

I slept on the floor for a few days in that apartment. For breakfast, I had coffee filled with a half cup of sugar so that I don’t feel hungry. For lunch, I found an amazing place where labourers used to eat, and they served 5 puris with unlimited vegetables and salad for Rs 15. For dinner, I would eat raw bread and have milk.

After completing that project, I joined BNP Paribas. As soon as I started getting some stability, I thought about starting up again but with a plan. I worked there for 9 months and then quit to start up again. I had taken up a job only to become emotionally stable and save some money.

Then I started an IT service company named CodeYeti in April 2015 and ran it for 2.5 years, before pivoting the entire business to a product named AstroTalk in October 2017.

Link to the story of how & why I started AstroTalk?

Within 2 years of launch, AstroTalk became the market leader in this industry. What we did right to scale so quickly and leave 20 years old companies behind? I think it is one or all of these:

  • Value Customer experience over everything else
  • Excellent customer support
  • Did the business honestly

They say a customer is a king, but we treat them like the queen and handle all their tantrums :)

AstroTalk became profitable within 1 year of launch and as I write this, it is making an annual profit of over USD 1 Million.

————————————————————————————————————

I realize I was right when I told her that we don’t need money to be happy. Money is required to meet your daily needs and to fulfill a few desires, but it doesn’t give you any eternal happiness, after a certain number.

While working on my startup, I have very few moments when I felt extreme happiness and none of them had anything to do with achieving any financial goal. It was only related to people and creating an impact on society. Below were both those moments:

  • When we celebrated the first anniversary of Codeyeti and I saw everyone in our team of 30 members - enjoying, laughing, and dancing. I felt I have done something good in life
  • When an unknown person in a social gathering at my friend’s party, referred me to try AstroTalk

I would end by saying that a few years of focus can take you way ahead in life. But to have that kind of focus, you need a huge motivation. That one incident in my life, changed me as a person as I had never focused on anything in my life before. I lost her that day but she gave me everything I needed to achieve my dreams. Well, in astrology they say, some people in our life just come to teach us a lesson, and they leave when their job is done.

If I have to choose between love and money, I will choose love every single time. Because none of my career achievements have ever given me the high that I got while being in love.


Footnotes:

You may check my Quora Bio for more information about my work.

 

How have you evolved as a couple? Can you show us in pictures?

We started our journey in 2013. Just out of school, I’ll be going year by year.

Year 2013 - This is one of the first pictures we clicked, hardly weighing around 45 kgs.

Year 2014 - I was not flexing, believe me.

Year 2015 - Way to Belur Math

Year 2016 - I went for masters and it started the journey of our long distance relationship, well sort of, I used to meet her every alternate week.

Year 2017 - Still Trying to gain weight.

Year 2018 - This was before shifting to Mumbai and the starting of True Long Distance Relationship.

Year 2019 - Being a bengali couple, we actually made sure we never missed saraswati puja in these 8 years.

Year 2020 - This was taken very recently after the lockdown was relaxed. I came to kolkata in march and working from home since then. This ended the long distance part after 4 long years, though i was here in kolkata and we actually live 2 km apart we had to wait 2 long months before meeting.

Year 2021 - The pic was taken on Saraswati Puja, (Basant Panchami) also celebrated as Bengali Valentines Day in Kolkata.

From the very few things we have in common, good food is what unites us. We have resolved innumerable fights over a plate of biryani.

From this -

to this -

We actually came a long way.

 

What's your most unforgettable travel experience?

It was 3 November 2019.

My mom and I were returning from a family function. We boarded a train from Kanpur at 11 pm and were supposed to spend all night in the train.

Since, we suddenly planned to attend the function, we were left unprepared to handle the cold night.

My mom covered herself with her dupatta (scarf) . I took out my shirt from my bag to cover myself. But my feet remained cold as ice.

Pic credits - Google

A guy (might be 19–20 years old) was sitting on the window side of the berth on which I was sleeping. He was noticing that I'm rubbing my feet for warmth.

Out of nowhere, he took out a blanket from his bag and covered himself as well as my feet with it.

I wanted to wake my mom up and say -'Mummy, damad mil gya.’

( Mom , I have found your son-in-law.)

That random act of kindness was the most unforgettable moment I had during traveling.

3 years back , I wrote an answer on quora. To my surprise, the answer was removed and quora said my answer needs an improvement. I reposted the same answer with some changes but still I couldn't get back that answer.

I'm not sure how this quora moderation policy works. I believe this time my answer will not be deleted.

Coming to the question, now I feel that particular answer is more apt for this question. I'll tell you a story,

During 2014, I used to give random Facebook requests to different girls on Facebook. One fine day ,my request was accepted by a girl from my home town( Coimbatore) . She was having a child picture as her display picture. I had a doubt if she is a girl. Because in 2014 Facebook was one of the most popular social media sites , many people created fake ids in the name of girls. I'm not sure why they were doing so. We used to chat everyday on Facebook. After 2 weeks of our regular and continuous chattings. I built some guts and asked her mobile number. Though she initially resisted , she gave her number. I called her to check if she is a girl. Thank God, she is a real girl not a fake id.

We started chatting in whatsapp. She was working in our native coimbatore and I was working in Bangalore ( I'm still working in Bangalore). She told me that she didn't want to cheat me with a different identity, she told me that she is not educated. She stopped her education at the age of 13 to support her family. Yes she hails from a poor family. Her biggest fear was since I'm educated and was working in a reputed company , I may stop talking to her after knowing her true identity. But the fact is I started loving her after knowing the truth about her. I didn't wait , I proposed her that day. She didn't accept my proposal and she told me that she wanted to meet me and after that she would take a call whether to accept my proposal or not.

I traveled from bangalore to coimbatore to meet her. That day I had the same fear that i had when I appeared for my first 10th standard board exam. I was waiting for her for 30 mins. Yes I went early as I was very nervous. She showed up. I could see a slim and dark beautiful lady in front of me. Yes I'm attracted to dark girls unlike most Indian men. After our 1 hour meeting, she accepted my proposal.

Then we were in ( Love) relationship for 4.5 years before our marriage( oh my God, I'm getting goose bumps when I write this) . Yes , you read it right , I'm happily married to Mrs.Pavithra Shriram for past 4.7 years our 5th Anniversary is on May 27th 2023. We have been blessed with a baby girl who is 3.7 years old now. I have attached our pictures below.

I would like to give you a quick update about our present life,

  1. Are we happy? My answer is yes. We have been facing loads of tough situations including financial issues and other misunderstandings which is common in any relationship. I'm okay with it.
  2. What my wife is doing ? She is a fashion designer and aspiring to start her own business. She is bold , she takes her own decisions. She was an average sales executive but she wanted to take a course on Fashion designing. I supported her to study, you know what , she is rocking now. Infact she grabbed the first place in tiruppur fashion week after completing her course.
  3. Any sacrifices? Yes we have been living in a long distance relationship for past 1 year as she wants to start her business in Coimbatore. I've been looking for a Job in coimbatore. I'll move to coimbatore next year . As of now I'm traveling from bangalore to coimbatore every month( Twice)

I'm not sure if this answer will also be deleted in future.

I kindly request the readers to let me know why such answers are deleted? Is it because of the some people who downvote these answers? I got 2000 likes for this answer. My other answers regarding movies and cricket are still there.

I believe my story is better than many movie love stories.

Thanks for reading !

You may also follow me on Instagram

Instagram - shri_rules

Edit 1:

Many asked me how did we manage to convince our parents, Yes convincing the parents was not easy. We somehow managed to convince Pavi’s parents but it took lot of time to convince my mother. Pavi and I were strong in our decision , We wanted to get married only with both parents’ blessings. Now both pavi’s parents and my parents are getting along well. Pavi is getting along well with my parents too.

I'll keep posting updates here. Thank you all for your nice comments which helped me to revert back the answer.

To avoid some negative comments, I'm shutting off the comments box. If you genuinely feel to give some positive comments, you may DM me anytime.

EDIT 2 :

Thank you all for your support - 7000 upvotes😊😊

Thanks !

Sleeping that night... That's the night I'll never forget for the rest of my life. It was 10:00 pm. She usually comes back around 8:00 pm from college. Not today. It was 11:30 now. Still not home. I left my house on an Activa along with my father, on a search for her. Mamma was home alone crying, bawling her brains out. We live in India, we don't tell people such problems and ask them for their help, cus "honor". Searched every place I could, asked people if they saw this girl anywhere, showing them her beautiful smile on dad's phone. No luck! Came back home at 1:30 without her. I couldn't see my mom cry anymore. I tried to shut my ears, couldn't. At 3:00, a friend of her texted saying she must have been at this resort 50 kms from home. Dad and I took the car, reached that place, but turns out you need a boat to get to the resort. And the boat service starts only at 5:00 in the morning. If you need to go there NOW, you have to take a detour and travel another 50 kms to get to the other side.Another 90 minutes, we reached that resort. It's a very remote place. The guard didn't let us in. They don't take guests after 9:00 pm, he said. No luck. Came back home, mommy was quiet. Mommy always scolded her daughter about things. But she always bought the costliest shit for her. I told them we need to inform the cops, mamma strictly said "NO!". That's the end of that discussion. Dad said, let's just go to sleep and fell on the bed. Mom was sitting on the edge. All of a sudden as I put the lights out, mamma started crying so loudly dad had to calm her down. She cried ALL night. It was 5:30 in the morning when we came home. Now it was 6:00. My mom was weeping slowly with her eyes against my dad's chest, while she laid her head on his shoulder. I could hear it ALL. That night I preferred to sleep right next to them. I had a lump in throat. I couldn't even recall the last time I had a lump this big. I realised that no matter how much we fight over stupid shit, I loved her WAY more than I thought I hated her. You'll never know what it feels like when you have no whereabouts of your sister. You'll never know how heavy your heart feels like until you know there's supposed to be another person in this house at this time of the day, but isn't. I tried to sleep with the lump still there. I don't know what happened next. I tried to think of every good thing in my life, but nothing popped up, nevertheless, between my mom's sobs and my dad's comforting words to her, I somehow managed to drift into sleep. At 7:00 dad's phone rang, I was in fact sleeping, but somewhere deep in my mind, something hit me like a hammer and compelled me to wake up and pick the damn phone!!! "Hello" "Hello!, Am I speaking to Mr..." "Yes! What is it?" "We have a patient here, she was unconscious, we couldn't find any contact until now, thankfully we got this number just a few minutes back. Do you know Sneha?" "YES!," "WHAT HAPPENED?" "Nothing. She happened to pass out near.... She's alright now, asleep." "WHICH HOSPITAL IS IT?" "....XYZ" Me and my dad hustled out of my house, while I grabbed the keys to the Activa. Got in the elevator, I cursed it for taking so long to reach down 23 floors. Dad rode it while I sat back. We were on our way to meet my sister. Only I know what thoughts were in my mind all that night. Every least possible thing seemed too probable to happen. And I mean EVERY possible thing. There was a moment when I wished to just want her back. Just Back ALIVE seemed satisfying. Am not good with emotions. My dad did shed a tear or a couple that night. Not me. But now when we were on our way to the hospital, feeling the cold wind passing through my hair lines, imagining what'd happen if we didn't hear anything from anybody about her even today, I broke down. I broke down but only before I made sure nobody was looking. Of course nobody was looking, it was 7:20, my dad was driving, I was behind him. I broke the lump in my throat and let a single tear roll down my left cheek. That's when I realised family is what keeps me ALIVE. :'( fin!
What is the hardest thing you have ever done? Hand over my friend's Dead Body to his Mother This happened when I was coming back from my college in bus. I got down the bus along with two of my regular bus friends. They take the bus from the same stop as mine. One guy Vivek and a girl Ekta. When we were crossing the road, me and Ekta were talking about some subject and Vivek almost crossed the street, waiting at the other side of the road. Suddenly a guy on a bike came and started waving his bike looking at me and Ekta. He suddenly increased his speed and as he was looking at us, he didn't see that his bike going off the road. In full speed, he hit Vivek who was not even on the road He realized that something wrong has happened, thus he fled away from there. Me and Ekta were shocked to witness the accident. I ran towards Vivek and turned his face. He was shivering due to pain and was unconscious. Blood were coming out of his ear. Ekta started shouting for help and crying at the same time. I ran here and there but there was no one. It was a hot afternoon and there were hardly any vehicle. Then I saw a car and almost jumped in front of it. I asked the guy in the car for help. Without waiting for his reply, I opened his back door and started lifting Vivek to it. He was too heavy for me and Ekta. So, the man helped us and we got him inside the car. We reached the nearest hospital and got him into ICU, but the doctors said that they can't help us because it was an accident case and they referred us to a government hospital which was around 1 hour drive away. We got inside that hospital's ambulance covering Vivek's ear with huge cotton roll. It was drenched with his thick maroon blood and I didn't realize that my college uniform was covered with blood while tears were rolling down my cheeks. We couldn't connect to Vivek's family as his phone was broken and we didn't have any of his family's contact. Anyhow, we reached SMS hospital Jaipur and took him inside. To my surprise, there was no one hurrying to help us. No one was tensed that he might lose his life. We were shouting and running here and there. Finally a compounder asked us to take him to the Emergency. There they gave us more cotton and asked us to wait for the Doctor. However, no one coming. It was like eternity when a nurse came. She checked him and asked me to take him for scan on the 2nd floor. We, two college girls, were pulling the stretcher and holding the cotton. finding a path or a lift to reach the second floor. We were feeling powerless. As if we are no one and our lives cost nothing. No one cares. I was burning with anger but did nothing and waited for the scan to get over. My tears never stopped. I hugged Ekta and was consoling her when her parents came. We took Vivek to emergency again. Ekta's father called someone, who called a doctor, who was a relative. He came in around 20 minutes. Finally, after 3 hours of the accident, a Real Doctor attended my friend. We were asked to go outside the room and there I saw the gallery (hospital compound) full of patients lying on the floor itself. Some were sleeping, some where crying, some recently operated and some waiting for weeks to get treated. Suddenly my tears stopped and instead of blaming the doctors, I got numb. I was thinking too much yet I was thinking Nothing. I was Numb. After 3 more hours, at 9 pm, the doctor told us that Vivek is no more with us. The Dead Body was then taken after some registration. After some paper work, it was sent to Vivek's place. There we saw the widow, who was Vivek's mother. Vivek was the only son and he had a sister who was mentally challenged. His mother was shattered when she saw her only son, who recently made her proud by getting placed in one of the best companies that came to our campus, dead in front of her. I couldn't see anything anymore and went home. Next day all the people, friends and family came to his place. Ekta asked me to reach there but I couldn't. After some time, I walked to his place but stopped at a distance and saw people going in and out and heard mourning sound coming from his home. I sat on rock, hiding my tears and thinking too much too fast. This was the first time I showed some courage. Lifted a guy who was bleeding, saw him shivering out of pain... Blood on my hands and face. It was thick... I could remember a great friend, a great son... I wish I could save him... The hardest part was to realize that this is reality - Death... A woman lost her partner and then her young Son... This is the reality that I don't think that people know... That many people are dying here everyday... Because of hundreds of reasons... This is the reality that I couldn't save his life... The reality is that people have accepted everything... The reality is that even today everything is the same EXCEPT for the life of that mother... EDIT1: Hi everyone, thanks for understanding what I have actually been through. Some people asked me whether I am in touch with the family. Yes! I am in touch with them since that day. It was 2011, May. We have been meeting her mom time to time and my family is in constant touch with them. His sister has been getting timely treatments free of cost from one of our relative who is a well known doctor in Jaipur. There are a great signs of improvement in her. Vivek's mom has opened a creche for small kids, she feels like all of those children are hers, she loves them..... Thanks everyone once again, for understanding me, god bless you all!!

Saturday 30 September 2023

Video Downloader and Video Downloader Plus Chrome Extension Hijack Exploit - UXSS via CSP Bypass (~15.5 Million Affected)

Note: This post is going to be a bit different from the previous Chrome extension vulnerability writeups. I’m going to actually walk through the code along with you to show you how tracing through an extension generally works. For this reason the whole thing is a bit lengthy. While scanning various Chrome extensions with tarnish I found the popular Chrome extensions Video Downloader for Chrome version 5.0.0.12 (8.2 million users) and Video Downloader Plus (7.3 million users) suffers from a Cross-site Scripting (XSS) vulnerability in their browser action page. All that is required to exploit these extensions is for a victim to navigate to an attacker-controlled page. The cause of this vulnerability is due to the use of string concatenation to build HTML which is dynamically appended to the DOM via jQuery. An attacker can craft a specialized link which will cause arbitrary JavaScript execution in the context of the extension. Using this exploit, an attacker can abuse the following permissions which the extension has access to: "permissions": [ "alarms", "contextMenus", "privacy", "storage", "cookies", "tabs", "unlimitedStorage", "webNavigation", "webRequest", "webRequestBlocking", "http://*/*", "https://*/*", "notifications" ], Using the above permissions an attacker is able to dump all browser cookies, intercept all browser requests and communicate as the authenticated user to all sites. It’s about as powerful of an extension as it gets. The Vulnerability The core of this vulnerability is the following piece of code: vd.createDownloadSection = function(videoData) { return '
  • \ \
    ' + videoData.fileName + '
    \ Download - ' + Math.floor(videoData.size * 100 / 1024 / 1024) / 100 + ' MB\
    \
  • '; }; This is a fairly textbook example of code vulnerable to Cross-site Scripting (XSS). The extension pulls these video links from our attacker-controlled page, so exploiting it should be straightforward. However, as is often the case with textbook examples, the real world situation is much more complicated. This post will walk through the speed bumps encountered along the way and demonstrate how they were bypassed. We’ll start with where our input is taken in, and follow it all the way to the final function. The Path to Victory The extension makes use of a Content Script to collect possible video URLs from both page links ( tags), and videos (