When Firefox Gets Angry: Fuzzing & Exploiting Gecko Engine Internals

In this presentation for DEF CON Group DCG 201 delivered in virtual reality at DEF CON 30 DCGVR, Sidepocket explores advanced browser DOM inspection techniques, developer tools, and client-side web exploitation. At 14:00, he demonstrates how to leverage browser developer tools to inspect dynamic elements, monitor network events, and extract client-side application state during open-source intelligence (OSINT) investigations.

Sidepocket highlights integrating external code editors at 28:00, showing how dumping complex DOM structures and obfuscated scripts directly into Sublime Text accelerates reverse engineering. At 42:00, he demonstrates an OSINT workflow for unmasking automated Twitter bot swarms ("spot the bot"), analyzing behavioral anomalies and synchronized posting intervals.

Moving into web application analysis at 56:00, Sidepocket shows techniques for multi-tab reconnaissance to audit third-party tracking scripts. At 01:10:00, he reveals methods for recovering hidden form elements, disabled password fields, and client-side validation logic. He wraps up at 01:24:00 with announcements regarding upcoming in-person meetings for DEF CON Group DCG 201 in New Jersey. (AI summary — Gemini Flash)