https://wiki.owasp.org/index.php?action=history&feed=atom&title=Exploiting_Firefox_Extensions 2026-04-18T01:21:11Z Revision history for this page on the wiki MediaWiki 1.27.2 https://wiki.owasp.org/index.php?title=Exploiting_Firefox_Extensions&diff=66472&oldid=prev 2009-07-24T06:52:13Z

<p>Created page with &#039;Firefox extensions are popular, well-established and used by millions of people around the world. Some of these extensions are recommended by the Mozilla community, and are impli…&#039;</p> <p><b>New page</b></p><div>Firefox extensions are popular, well-established and used by millions of people around the world. Some of these extensions are recommended by the Mozilla community, and are implicitly trusted by the masses. Little is known about Firefox extensions from a security perspective and our research intends to fill this gap.<br /> <br /> The talk is divided in two parts: theory and practice. First, security model of Firefox extensions will be explored and security testing methodology will be presented. Next, it will illustrated on how to apply the theory and discovered severe vulnerabilities in the most popular and recommended Firefox extensions. Examples of exploits will also be demonstrated.<br /> <br /> After this talk, attendees will have gained a better understanding of the security implications, threats and risks of using and deploying Firefox extensions. Security professionals and auditors will be able to use our material as a security testing framework when auditing Firefox extensions</div>

Dhruvsoi