Description
/json/version接口泄露webSocket调试URL，攻击者无需认证即可访问返回包中的 webSocketDebuggerUrl，通过远程连接调试接口获取更多敏感数据
Chrome 远程调试 /json/version 未授权访问漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cn-sec.com/archives/1098484.html
https://embracethered.com/blog/posts/2020/chrome-spy-remote-control/
https://cloud.tencent.cn/developer/article/1620907
https://infosecwriteups.com/local-privilege-escalation-by-leveraging-remote-debugging-protocol-features-pt-1-0550c5941cbf
https://developer.chrome.com/blog/remote-debugging-port
https://issues.chromium.org/issues/40063053
https://www.canva.dev/blog/engineering/discovering-headroll-cve-2023-0704-in-chromium/
https://swisskyrepo.github.io/PayloadsAllTheThings/Headless%20Browser/