cefdebug
A minimal command-line utility for connecting to and exploiting exposed CEF/Electron debuggers during security assessments.
What is cefdebug?
cefdebug is a minimal command-line utility that connects to exposed CEF, Electron, and Chromium debuggers using libwebsockets. It helps security researchers identify and exploit debug interfaces that are inadvertently left enabled in production applications, often leading to remote code execution vulnerabilities. The tool provides scanning, command execution, and interactive shell capabilities for penetration testing.
Security researchers, penetration testers, and developers auditing applications built with CEF or Electron for exposed debug interfaces. It is specifically useful for those assessing the security of desktop applications that embed Chromium.
cefdebug offers a simple, embeddable solution for interacting with CEF debuggers without complex setup. Its minimal codebase and practical examples make it a valuable reference for security assessments, especially when testing for critical vulnerabilities like DNS rebinding and unprotected debug endpoints.
Overview
Minimal code to connect to a CEF debugger.
Use Cases
Best For
- Identifying exposed CEF debug ports on local machines
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
