attacker-controlled page (debugger target)