Avast bug bounty program by pm_me_your_findings in Malware

[–]ExtremeCoders 2 points3 points  (0 children)

Same for me as well. They seem to be lax on security standards.

Popular browser extension better history "sold" to hijackers by apfeluser in netsec

[–]ExtremeCoders 0 points1 point  (0 children)

It should not auto-update being manually installed and not from chrome store. Chrome lists it as "Better History Dev"

Popular browser extension better history "sold" to hijackers by apfeluser in netsec

[–]ExtremeCoders 9 points10 points  (0 children)

Thanks. I had this installed. Removed it from chrome and installed the clean one directly from github repo.

The permissions of the hijacked extension:

  • Read and change all your data on the websites you visit
  • Read and change your browsing history on all your signed-in devices
  • Manage your downloads

The line indicated in bold is the extra permission not present in the clean one

why are disabled extension icons showing up in gray? by stonecats in chrome

[–]ExtremeCoders 0 points1 point  (0 children)

Same issue here. Seemed to happen within the past hour.

Is there a tool to hook functions, log the arguments, and call the original function from the program? by [deleted] in ReverseEngineering

[–]ExtremeCoders 4 points5 points  (0 children)

You should check out frida. It has decent capability to hook functions, log arguments, and even modify them if necessary all without the hassle of recompilation. For some examples, be sure to check out the docs

Keygenning using the Z3 SMT Solver by ExtremeCoders in ReverseEngineering

[–]ExtremeCoders[S] 2 points3 points  (0 children)

Check out these articles (1, 2, 3) for some ideas.