Thursday, August 11, 2011

Weaponizing Firefox - part 2


Ready for more? Let's continue to setup our browser, this time we are going to see how to install and use Firebug and Firecookie!


Firebug


Start by grabing it here > https://addons.mozilla.org/en-US/firefox/addon/firebug/

So what is firebug? This addon will let us, among other things, edit the current page without having to either download it or load our proxy and intercept the server response, it's worth noting that it can also serve as a JavaScript debugger.

Let's see a few examples of how this can be useful...


Getting rid of annoying restrictions:



Inspecting elements to see why our xss attempt didn't work:




Firecookie


Firecookie integrates with firebug to grant it the ability to manipulate cookies, the current version (
1.2.1)  does not work well with firebug 1.8, even the  one offered at the developer's site gives problems:

That is also a good place to take a look at it's features, but to get it working you will have to build your own from the svn http://code.google.com/p/firecookie/source/checkout or if you trust me just download it from here http://www.mediafire.com/?3nrmid7jgs73d7b which I build myself and can confirm that it works.




No comments:

Post a Comment