Exploiting Chrome Extensions: An In-Depth Analysis

This chapter explores the vulnerabilities associated with Chrome extensions, particularly focusing on CSS injection and its implications for web security. It discusses the challenges posed by Content Security Policies and innovative exploitation techniques, including the manipulation of URL parameters and event clicks. The chapter also emphasizes the broader context of business logic in extensions and how they can be abused in scenarios involving authenticated user actions.

Transcript

Play full episode

The AI-powered Podcast Player

Save insights by tapping your headphones, chat with episodes, discover the best highlights - and more!

Get the app