# Backdoor 2.0: Hacking Firefox to steal his web secrets

By: Sunil Arora

Conference: Clubhack
Year: 2007
Date: 2007-12-19

Tags: red-teaming, application-pentesting, browser-security, dynamic-analysis, malware-prevention


## Resources
- Conference Link: https://web.archive.org/web/20071218143702/http://www.clubhack.com/2007/speakers.html
- Presentation: https://web.archive.org/web/20160330182908/http://www.clubhack.com/2007/files/Sunil-Hacking_firefox.ppt



Firefox ("Free, Faster and Secure" web browser) is gaining popularity at a very fast rate. I will talk in detail about techniques to write a malware for Firefox to steal a victim's web secrets like username, password, credit card number etc. I will also discuss the recently discovered vulnerabilities in firefox and how one can exploit them to push the malware to victim's Firefox remotely.
At the end of the talk, I will be giving a demonstration of exploiting one of the existing vulnerabilities to install the malware in victim's Firefox to steal his web secrets.