Comments on: FFSpy, a Firefox Malware PoC http://myf00.net/?p=758 Ideas, projects and thoughts by Duarte Silva Fri, 12 Mar 2010 19:24:58 +0000 http://wordpress.org/?v=2.9.2 hourly 1 By: Duarte http://myf00.net/?p=758&cpage=2#comment-11 Duarte Sun, 31 May 2009 01:17:41 +0000 http://myf00.net/?p=18#comment-11 <code>noscript.jar</code> is under <code>%appdata%\Mozilla\Firefox\Profiles\<strong><random string></strong>.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}\chrome</code><br/>Please do use your search for files feature :) noscript.jar is under %appdata%\Mozilla\Firefox\Profiles\<random string>.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}\chrome
Please do use your search for files feature :)

]]> By: Mark http://myf00.net/?p=758&cpage=2#comment-10 Mark Sat, 30 May 2009 18:04:27 +0000 http://myf00.net/?p=18#comment-10 Alo, I have noscript installed, but I can't find the noscript.jar file, how uncompress it or where is the archive? BTW, I edited the browser.xul file, i added the follow line (then compress again with winzip, rename browser.jar): Line: it not works! I have my server up and the php file and works fine, the ffspy.js file under content folder, mmm what's wrong? mark Alo, I have noscript installed, but I can’t find the noscript.jar file, how uncompress it or where is the archive?

BTW, I edited the browser.xul file, i added the follow line (then compress again with winzip, rename browser.jar):

Line:

it not works!

I have my server up and the php file and works fine, the ffspy.js file under content folder, mmm what’s wrong?

mark

]]> By: remove http://myf00.net/?p=758&cpage=2#comment-9 remove Fri, 29 May 2009 18:50:24 +0000 http://myf00.net/?p=18#comment-9 its pretty easy to produce a ff spyware i have coded a own script out of your method and its very useful. gr44tz ~remove its pretty easy to produce a ff spyware i have coded a own script out of your method and its very useful.

gr44tz ~remove

]]> By: Alex Hernandez http://myf00.net/?p=758&cpage=1#comment-8 Alex Hernandez Fri, 29 May 2009 15:43:16 +0000 http://myf00.net/?p=18#comment-8 Uff a really great PoC to probe more things and how to malware works over FF.. -alex :-) Uff a really great PoC to probe more things and how to malware works over FF..

-alex :-)

]]> By: Duarte http://myf00.net/?p=758&cpage=2#comment-7 Duarte Wed, 27 May 2009 22:19:37 +0000 http://myf00.net/?p=18#comment-7 True. But is also interesting to see that there isn't nothing to ensure the user the plug-in isn't changed. True. But is also interesting to see that there isn’t nothing to ensure the user the plug-in isn’t changed.

]]>