labs

Our popular tags

XSS Frans Rosén Mathias Karlsson bug bounty Cross Site Scripting Chrome privacy Hostile Subdomain takeover Ethical Hacking Slack postmessage PHP

Most Read Articles

How I made LastPass give me all your passwords Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token Slack bot token leakage exposing business critical information Chrome Extensions – AKA Total Absence of Privacy How Patreon got hacked – Publicly exposed Werkzeug Debugger

Analyze your website from a hacker’s perspective. Sign up for a Detectify free trial»

Detectify Labs > Lastpass

How I made LastPass give me all your passwords

2016.07.27 labsdetectify

Stealing all your passwords by just visiting a webpage. Sounds too bad to be true? That’s what I thought too before I decided to check out the security of the LastPass browser extension.

Our popular tags

XSS Frans Rosén Mathias Karlsson bug bounty Cross Site Scripting Chrome privacy Hostile Subdomain takeover Ethical Hacking Slack postmessage PHP