Questions tagged [plugins]
The plugins tag has no summary.
38 questions
1 vote
2 answers
126 views
Security risk from installing a third-party Add-in in MS Word
Background: Our procurement team is considering using Pincites to review contracts made with vendors. For Pincites to review the Word document where the contract is written, it needs the procurement ...
- 1,447
2 votes
1 answer
873 views
Why would website block password manager auto-fill?
I use a password manager and have a browser plugin installed for it to simplify entering passwords into websites. I recently encountered a website (enterprise SaaS solution I use at work), which ...
- 281
0 votes
1 answer
5k views
Volatility: AutoMagic Symbol Table error
I am trying to analyze the .vmem file from HoneyNet challenge 3: Banking Troubles (HoneyNet) using volatility3. But I can't seem to get past this error: PS C:\Users\<user>\Desktop\HoneyNet\...
1 vote
0 answers
125 views
Isolating permissions available to browser JS via oauth and referer
This proposal concerns a strategy for isolating the permissions given to plugins in a plugin architecture. I'm looking for insight into whether this design can succeed in isolating those permissions. ...
- 111
2 votes
1 answer
258 views
Is possible to implement a Web Cryptography API custom provider?
I'm reading some basic info about Web Cryptography API and I'm wondering if is possible to implement some crypto provider (C/C++ library or something) with some extra algorithms or is mandatory to use ...
- 57
0 votes
0 answers
257 views
Why does Firefox keep offering "unreputable" add-ons and add-ons that they don't even review?
When I install an add-on to Firefox, choosing it from the ones I find by using the Tools / Add-ons menu, sometimes after a few days Avast pops up a warning that the add-on is "unreputable" and ...
- 411
1 vote
2 answers
302 views
Can plugins for text editors and IDEs be malicious?
I'm always a little cautious about plugins I install for text editors or browsers, but can they be dangerous and cause the text editor or browser to behave in a malicious way? For example, can a ...
user205297
1 vote
1 answer
307 views
Haunted Google Account?
Not to be dramatic but at my level of inexperience, the title is what I'm left with. Hoping smarter people can point me in the right direction, so here goes... A google account used in a school ...
- 13
1 vote
1 answer
458 views
Why request and response calls in my burp suite python plugin come in such random order?
So I am trying to write this burp plugin using jython and python for burp suite. Now in the processHttpMessage body, I found before a proper execution of the entire method takes place for one request ...
- 57
2 votes
1 answer
149 views
How can I programatically keep track of number of certificate warnings in browser?
I want to keep a count of how many certificate warnings have been made in the browser over a period of several weeks. I also want to keep track of whether the user ignored these warnings and just ...
- 1,586
14 votes
4 answers
4k views
How trustful are KeePass plugins?
KeePass is great, I love it but after several years using it, sometimes I wish to install a plugin but I don't because I'm scared of what this plugin can really do without my consent. The ...
- 301
4 votes
1 answer
9k views
Metasploit. Is always replacing domain names with resolved ips on RHOST/RHOSTS?
There is a website which I want to audit. That site must have a concrete Virtualhost configuration because if you access to it using the domain name the website is shown, but if you use the ip address ...
- 5,395
70 votes
8 answers
19k views
Why use HTTPS Everywhere when we have HSTS supported browsers?
I know that the browser's default protocol to access any site is http:// when https:// is explicitly not mentioned, but even then if we browse to a website say www.facebook.com, the response header ...
- 882
2 votes
1 answer
276 views
Plugins to increase security of Chrome? [closed]
What plugins are there for Chrome, that would increase security while browsing the web? For Firefox I have used NoScript, Flashblock, and AdBlock Plus, are there equivalents to these plugins for ...
- 157
2 votes
4 answers
233 views
Plugin / extension security practices
What kind of common security practices do software developers apply when allowing extensions or plugins to be added to their software, like e.g. Firefox, Photoshop and GIMP do? It can be either on ...
- 23