Extension Land: Exploits and Rootkits in Browser Extensions (Live)
Barak Sternberg delivers the live demonstration on weaponizing browser extension IPC and message-passing flaws into persistent browser rootkits.
Summary
The Overlooked Attack Surface of Browser Extensions
Browser extensions enjoy high-privilege access across web origins, cookies, and local storage, often functioning outside standard browser security models.
Live Analysis of Extension IPC Vulnerabilities
Barak Sternberg examines message-passing and postMessage handlers in popular extensions, showing how unvalidated input allows malicious websites to hijack extension APIs.
Transforming Browser Extensions into Stealthy Rootkits
Sternberg demonstrates how a compromised extension provides persistent execution, intercepts plaintext keystrokes, steals authentication tokens, and bypasses CSP rules.
Defensive Manifest Architecture and Auditing
The author provides developers with secure coding standards for Manifest V3, input validation routines, and tools to audit extension attack surfaces.
Related talks
Main Stage·49 min
Barak Sternberg
Barak Sternberg exposes vulnerabilities in browser extensions, demonstrating how to weaponize privileged extension APIs into persistent browser rootkits.
Main Stage·47 min
Jeff Dileo
Demonstrates how eBPF programs can be weaponized to create undetectable Linux kernel rootkits with full privilege and persistent covert channels.
Black Hat·40 min
Lachlan Davidson
Engineers explore architecture and security mechanisms for Discovering React2Shell: JavaScript’s Long-Awaited Deserialization Flight-mare.