browser-extensions

IEEE Symposium on Security and Privacy·16 min

• IEEE SP
• Privacy
• Date: 2025
• Location: Ieee Sp

Industry experts analyze emerging threats surrounding Detection of Inconsistencies in Privacy Practices of Browser Extensions.

IEEE Symposium on Security and Privacy·20 min

• IEEE SP
• AppSec
• Date: 2025
• Location: Ieee Sp

Browser Extensions

Security researchers examine technical aspects of EmPoWeb: Empowering Web Applications with Browser Extensions.

IEEE Symposium on Security and Privacy·18 min

• IEEE SP
• Recon
• Date: 2025
• Location: Ieee Sp

Analysts investigate attack surfaces and defenses concerning XHOUND: Quantifying the Fingerprintability of Browser Extensions.

Main Stage·50 min

• DEF CON
• AppSec
• Date: Aug 2025
• Location: Las Vegas

Lior Shmueli · Tomer Peled

Exposes UI redressing and clickjacking vectors in popular browser extensions that trick users into granting administrative cloud permissions with a single click.

Recon Village

• DEF CON
• Blue Team
• Date: Aug 2025
• Location: Las Vegas

Nishant Sharma

Scan and score browser extensions for spyware and supply-chain risk.

Wild West Hackin' Fest Deadwood 2025·40 min

• WWHF
• Red Team
• Date: 2025
• Location: Wwhf

Fin Hume

Examines the Extendables: Exploiting Browser Extensions for PrivEsc and Persistence | Fin Hume and evaluates key implications for security practitioners.

Creator Stage·21 min

• DEF CON
• AppSec
• Date: Aug 2024
• Location: Las Vegas

Vivek Ramachandran · Shourya Pratap Singh

Demonstrates stealthy data exfiltration and arbitrary code execution attacks bypassing Chrome Manifest V3 security restrictions.

Hack In The Box Security Conference·32 min

• HITB
• AI Security
• Date: 2024
• Location: Hitb

Rewanth Cool

Rewanth Cool examines BSides Dubai 2018: Creating Browser Extensions To Hunt For Low-Hanging Fruit.

Live Presentations·37 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

Barak Sternberg

Barak Sternberg delivers the live demonstration on weaponizing browser extension IPC and message-passing flaws into persistent browser rootkits.

Main Stage·49 min

• DEF CON
• AppSec
• Date: Aug 2021
• Location: Las Vegas

Barak Sternberg

Barak Sternberg exposes vulnerabilities in browser extensions, demonstrating how to weaponize privileged extension APIs into persistent browser rootkits.

AI Village·24 min

• DEF CON
• AI Security
• Date: Aug 2019
• Location: Las Vegas

Roei Amit

How to Get over your Malicious Extensions using Deep Learning.