Using the Chrome Dev Tools Protocol for Pentesting and Bug Hunting

No ratings

Presented at BSidesAustin 2019 by

Alex Useche

The Chrome Dev Tools protocol allows us to hook our code to the browser via an API. This means that we can write our end functions that process requests and responses to aid in our pentesting endeavors. This talk will show how the Chrome Dev Tools protocol works and how we can use it to reverse JavaScript and alter the behavior of an app to find bugs and vulnerabilities. Additionally, a tool will be demoed that can be used for doing just that by writing simple modules in Go called "gorp".