Collaborate Disseminate
In Firefox or Chrome,
is it possible for a web page script to compromise a user installed extension?
This might involve access to extension private data or obtain the same execution privileges as the compromised extension. … Continue reading Malicious script compromising browser extensions
BeEF is a great browser-based exploitation tool. But in some cases, people unknowingly get hooked due to beef when its hook.js is kept in an invisible iframe of an HTML source.
So how can we detect that our browser is actually hooked by B… Continue reading Preventing Browser from BeEF Exploitation
BeEF – the browser exploitation framework. I think (thought) I had a basic working understanding of how it works. Recently, though, I was watching, this DEFCON talk, where a hacker used a man-in-the-middle attack to inject … Continue reading How does BeEF work and how can it be persistent?
cookies usually contain a sessionId to keep track of a logged user.
What would prevent a malicious user to forge millions of requests with random sessionIds and send them to a server, hoping to luckily end up with an existin… Continue reading Session Hijacking through sessionId brute-forcing possible?