Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Netlas Chrome and Firefox Extensions

netlas.io | blog | #firefox | #chrome | #vulnerability-detection | #browser-extension | #netlas

Summary

Walks through installing and using the Netlas extension for Chrome and Firefox: store setup, connecting an API key, and manual versus automatic (Smart Logo) vulnerability-detection modes.
Published
Collected

original ↗

Related coverage

research · portswigger.net
Bypassing DOMPurify again with mutation XSS
A fresh mutation XSS bypass of DOMPurify's patch: crafted comments and encoded tags mutate sanitized markup into executable XSS in Chrome, plus a CDATA variant for Firefox; fixed in DOMPurify 2.1.
blog · netlas.io
Plug & Pwn: Mapping the Windows PnP Auto-Install Attack Surface
Netlas maps Windows PnP auto-install from DEF CON's Plug & Pwn: the OS fetches and runs vendor packages as SYSTEM; the remote variant rides authenticated RDP, so exposure can be scoped from outside.
blog · netlas.io
Discovering Data Exposure with Netlas
How to find exposed configs, API keys, database credentials, bearer tokens and debug outputs at scale using Netlas response data — mapped to OWASP Top 10:2025 exposure categories.
blog · netlas.io
Telegram Bot API Abuse
Threat actors abuse Telegram's Bot API as a covert channel for phishing, telemetry and malware delivery; Netlas hunts surface Xeno lures and fake Adobe updates with stable detection anchors.
blog · netlas.io
Using OWASP Amass with Netlas Module
How to install OWASP Amass and configure its Netlas module: add a Netlas API key to datasources.yaml to fold Netlas subdomain discovery into recon; covers three installation methods.
blog · netlas.io
How we hunt C2 infrastructure at RST Cloud using Netlas
How RST Cloud hunts C2 infrastructure with Netlas: a seven-step loop from goals and samples to fingerprints (JARM, certificates, HTTP headers), scheduled searches and multi-criteria validation.
back