[*] Serving on https://0.0.0.0:8443
[*] APEX (victim)   : https://a.test:8443
[*] ATTACKER (sub)  : https://attacker.a.test:8443
[*] Navigate Chrome to: https://attacker.a.test:8443/trigger
[*] Log file: /poc-artifacts/server.log
[*] Server PID 2364, profile /tmp/chrome-dbsc-poc.A7uaG0
[*] Launching Chrome...
[REQ] GET host=attacker.a.test path=/trigger
[STEP] Serving /trigger with Secure-Session-Registration: (ES256 RS256);challenge="poc_challenge";path="https://a.test:8443/open-redirect"
[REQ] POST host=a.test path=/open-redirect Secure-Session-Response(len=339)
[REQ] GET host=attacker.a.test path=/favicon.ico
[STEP] APEX open-redirect hit (this is fetcher_endpoint_). Redirecting to https://attacker.a.test:8443/dbsc
[STEP] -> registration JWT was sent to APEX (len=339)
[REQ] GET host=attacker.a.test path=/dbsc Secure-Session-Response(len=339)
[STEP] ATTACKER /dbsc serving site-wide config for origin=https://a.test:8443 include_site=true refresh_url=/refresh (-> https://attacker.a.test:8443/refresh)
[REQ] GET host=a.test path=/.well-known/device-bound-sessions
[!!!] APEX /.well-known/device-bound-sessions WAS FETCHED -> bypass did NOT work
[REQ] GET host=a.test path=/probe

================ server.log ================
[*] Serving on https://0.0.0.0:8443
[*] APEX (victim)   : https://a.test:8443
[*] ATTACKER (sub)  : https://attacker.a.test:8443
[*] Navigate Chrome to: https://attacker.a.test:8443/trigger
[*] Log file: /poc-artifacts/server.log
[REQ] GET host=attacker.a.test path=/trigger
[STEP] Serving /trigger with Secure-Session-Registration: (ES256 RS256);challenge="poc_challenge";path="https://a.test:8443/open-redirect"
[REQ] POST host=a.test path=/open-redirect Secure-Session-Response(len=339)
[REQ] GET host=attacker.a.test path=/favicon.ico
[STEP] APEX open-redirect hit (this is fetcher_endpoint_). Redirecting to https://attacker.a.test:8443/dbsc
[STEP] -> registration JWT was sent to APEX (len=339)
[REQ] GET host=attacker.a.test path=/dbsc Secure-Session-Response(len=339)
[STEP] ATTACKER /dbsc serving site-wide config for origin=https://a.test:8443 include_site=true refresh_url=/refresh (-> https://attacker.a.test:8443/refresh)
[REQ] GET host=a.test path=/.well-known/device-bound-sessions
[!!!] APEX /.well-known/device-bound-sessions WAS FETCHED -> bypass did NOT work
[REQ] GET host=a.test path=/probe
============================================

[*] Chrome stderr/stdout : /poc-artifacts/chrome.log
[*] NetLog               : /poc-artifacts/netlog.json

================ DBSC NetLog events ================
DBSC_REGISTRATION_REQUEST {"source_dependency": {"id": 88, "type": 1}}
DBSC_REGISTRATION_RESULT {"status": "registration_failed"}
====================================================

[FAIL] well-known was fetched -> bypass did not work