4 ms·
A tool like this should be running in a browser. Otherwise, if the method of intercepting the traffic only manipulates the browser (for example a rogue extensi
by fefe23 7y ago
A tool like this should be running in a browser.
Otherwise, if the method of intercepting the traffic only manipulates the browser (for example a rogue extension or proxy setting you were not aware of), a standalone tool could not detect it. Right?
Also, I would generally avoid any security tools that do not come as source code. Mentioning that you are an infosec guy with 15 years of experience only makes this point hit even harder.
- cheez 7y agoIt's not possible to access certificates in the browser.
- tialaramex 7y agoAn extension can do it: https://addons.mozilla.org/en-GB/firefox/addon/certainly-something/ https://addons.mozilla.org/en-GB/firefox/addon/certainly-som...
- badrabbit 7y agoRight, banking trojans for example inject code into browser processes so the trojan can sniff decrypted traffic. Corporate snooping is also done by pushing root certs on to both system wide and browset trust stores.