labs

Our popular tags

XSS Frans Rosén Mathias Karlsson bug bounty Cross Site Scripting Chrome Hostile Subdomain takeover Ethical Hacking Slack postmessage PHP SQL Injection

Most Read Articles

How I made LastPass give me all your passwords Hacking Slack using postMessage and WebSocket-reconnect to steal your precious token Slack bot token leakage exposing business critical information Chrome Extensions – AKA Total Absence of Privacy How Patreon got hacked – Publicly exposed Werkzeug Debugger

Analyze your website from a hacker’s perspective. Sign up for a Detectify free trial»

Stay on top of security - sign up for our newsletter

Receive monthly updates about the latest vulnerabilities, hacker attacks and security best practices.

Detectify Labs > Lastpass

How I made LastPass give me all your passwords

2016.07.27 labsdetectify

Stealing all your passwords by just visiting a webpage. Sounds too bad to be true? That’s what I thought too before I decided to check out the security of the LastPass browser extension.