Skip to content
Simple PoC to leak contents from embedded origin
C++
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
LICENSE
README.md
url_loader.cc
url_loader.nmf
url_loader.pexe
url_loader_handler.cc
url_loader_handler.h

README.md

PNaCl_Leaker

Simple PoC to leak contents from embedded origin using Chrome's PNaCl plugin

Change target_url in url_loader.cc to your desired exfiltration target. Change target_url in url_loader_handler.cc to your leak destination. Note that this destination needs to allow CORS access from embedded origin, and leak destination's response body needs to be test.

This is modified version of url_loader example. Read Native Client tutorial for how to complile Native Client module.

For more details about PNaCl_Leaker read following post.

https://shhnjk.blogspot.com/2019/07/intro-to-chromes-gold-features.html

You can’t perform that action at this time.