neto

项目 Neto：浏览器插件分析工具包 概述 项目 Neto 是一个 Python 3 包，旨在分析和揭示 Firefox 和 Chrome 等知名浏览器的浏览器插件和扩展的隐藏特性。它自动化了解压打包文件的过程，从扩展的相关资源（如 manifest.json、本地化文件夹或 JavaScript 和 HTML 源文件）中提取这些特性。 安装 要安装该包，用户可以选择 pip3。 root@kitploit: pip3 install -e . --user 或者，也可以使用 sudo 以管理员权限安装： root@kitploit: sudo pip3 install -e...

webrtc-ips

Solicitudes de direcciones IP STUN para WebRTC Demo: https://diafygi.github.io/webrtc-ips/ Qué hace esto Firefox y Chrome han implementado WebRTC, que permite realizar solicitudes a servidores STUN que devuelven las direcciones IP locales y públicas del usuario. Los resultados de estas solicitude...

https-everywhere

HTTPS Everywhere 更新信息 ⚠️ 该项目已不再维护或更新。请卸载并引导用户参考下方建议，通过浏览器原生方式默认启用 HTTPS。 你不再需要 HTTPS Everywhere 来默认设置 HTTPS！主流浏览器现已原生支持仅 HTTPS 模式。 点击此处了解如何开启该功能。 此扩展将于 2023 年 1 月停止使用。 HTTPS Everywhere 入门指南 HTTPS Everywhere 是一款 Firefox、Chrome 和 Opera 扩展，可加密您与许多主流网站的通信，使您的浏览更加安全。加密网络：立即安装 HTTPS Everywhere。 针对用户...

CVE-2024-50346 WebFeed HTML injection vulnerabilities

WebFeed is a lightweight web feed reader extension for Firefox/Chrome. Multiple HTML injection vulnerabilities in WebFeed can lead to CSRF and UI spoofing attacks. A remote attacker can provide malicious RSS feeds and attract the victim user to visit it using WebFeed. The attacker can then inject...

CVE-2024-4460

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

ClearURLs - An Add-On Based On The New WebExtensions Technology And Will Automatically Remove Tracking Elements From URLs To Help Protect Your Privacy

ClearURLs is an add-on based on the new WebExtensions technology and is optimized for Firefox and Chrome based browsers. This extension will automatically remove tracking elements from URLs to help protect your privacy when browse through the Internet, which is regularly updated by us and can be...

Feature and Permission Policies. Security issues

Introduction In order to help enhance the user experience of their site, companies may ask to use features of your browser, such as geolocation or notifications to produce a more tailored experience. Web site developers may configure the site or allow third-party content, loaded in frames, to use...

Ubiquiti Inc.: [scores.ubnt.com] DOM based XSS at form.html

Hello, I would like to report that the 130889 bug hasn't been fixed completely. The removeTags function has been added, however an attacker is still able to inject Javascript as parameter values without any HTML tags:...