Chapter 4: Hic Jacet Chromium

Thanks to your help, we have been able to forge signatures and chat with other members from the target organization.

More particularly, by impersonating the DEV, we have now established a privileged communication channel with the boss! After a bit of chatting with Emerald we had more details about the mission he was asking for:


                EMERALD>
                I need your help to build my new secret web page. My cousin Bonarium is working on a highly secure browser project.
                He sent me a brand new Chromium shipped with an additional authentication module.
                It's still in development, but I want you to test it to make sure he's not scamming me once again.


                DEV>
                Okay, how should I proceed? Do you want me to send you the code directly?


                EMERALD>
                Yes, just send me a POST request containing the webpage contents and I'll try it locally as soon as possible. Hurry up, I need it fast.
                You can download the material needed here.
                It contains the code Bonarium added and the binaries you will need.


                DEV>
                Trying to run it right now but I'm not sure which flags to use...


                EMERALD>
                You can't do anything on your own, can you?
                Bonarium told me to use --no-sandbox --headless=new --disable-gpu to speed up my browsing experience.
                Don't know what it means, but I hope he's right or I'm definitely firing him this time.

We have been informed that Bonarium is the worst developer ever born. This may very well be our shot to hack the boss' browser and get a reverse shell on his machine. We've never been this close to reaching our goal. Good luck, you got this!

Chapter 4: Hic Jacet Chromium

Detective view