Mastodawn

Stop chasing blacklists. It's a losing game. I built a Rust engine
to spot AitM proxies where they bleed: in the DOM. Meet Electric Eye.

https://bytearchitect.io/network-security/Bypassing-MFA-with-Reverse-Proxies-Building-a-Rust-based-Firefox-Extension-to-Kill-AitM-Phishing/

#infosec #rust #firefox

Show thread

yoasif Mar 10

@gbiondo Cool extension. Based on your screenshots, it'd be cool if this were a page action and showed some status (perhaps even the value, but that seems less friendly) in the icon itself.

Page actions: https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/API/pageAction

pageAction - Mozilla | MDN

Read and modify attributes of and listen to clicks on the address bar button defined with the page_action manifest key.

MDN Web Docs

Show thread

Gabriele Biondo Mar 10

@yoasif

It's in its development phase. I was thinking to add like a ring around the icon to show the status (green, amber, red), or stgh. like that.

Thanks for the suggestion, anyway. I will implement some visual feedback shortly.

Show thread

yoasif

@gbiondo Of course, the complicated part is all the stuff that came before the screenshots, so I'm really just bike-shedding.

Really cool stuff!