Hackosis

This may be old news, but not to me. You might also be surprised that you can edit any web page live in your browser by using a bit of javascript. It is limited to text only.

Paste the following into your address bar:

I noticed this did not work in Gmail. This is tested and is known to work in Firefox 3 and IE7. [via blogstorm.co.uk]

Glubble is a Firefox extension that enables a family to create a ’safe’ browsing environment for families with children 12 and under. The Glubble Firefox extension ‘locks down’ your browser and allows you to setup user accounts for the family.

Glubble can show only trusted sites, or selections can be provided by preselected ‘trusted brands’. Glubble even alters search results for children, only displaying results from approved sites.

NOTE: Be careful running this with other extensions such as NoScript — Glubble is a brute and won’t allow you to enable/disable extensions. This left me stuck in the setup process.You should disable other extensions before trying Glubble.

Makeuseof.com writes about Five “Firefox Tips You May Not Know About“.

Topics include:

1. Quick search - without going to a search engine first.
2. Delete visited URL’s
3. Navigate to browser tabs using the keyboard
4. Start downloads instantly
5. Grab files off webpages, even protected webpages

Do you know any more uncommon Firefox tips and tricks? Leave us a comment. { via lifehacker.com }

Hides bad things. Saves all the tabs in the current window, closes them, and replaces them with the homepage tabs. Saved tabs can later be recovered. Can clear the following at the user’s choice:

• History
• Recently Closed Tabs list
• Saved form info
• Saved passwords
• Download history
• Cookies
• Cache
• Searchbar

Get it at the Firefox Add-ons Site. { via kabatology.com }

image by gbaku

FireCAT is a collection of Firefox extensions that assists with security auditing and much more. Thanks be to Security-database.com.

In a nutshell, the FireCAT list includes (v1.3):

Shazou | Active Whois | DomainFinder | HostIP.info | ShowIP | ASnumber | Router Status | Header Spy | Header Monitor | People Search | Gnosis | Who is this person | FaceBook ToolBar | Advanced dork | SpiderZilla | View Dependencies | GSI Google Site Indexer | Bibirmer toolbar | FoxyProxy | SwitchProxy | Pow (Plain Old WebServer) | Jsview | Cert Viewer Plus | FireBug | XML developer Toolbar | HackBar | FireWATIR (Scripts 1, Scripts 2) | ChickenFoot (Commands) | Tamper Data | HeaderMonitor | LiveHTTPHeaders | RefControl | User Agent Switcher | Add n Edit Cookies | Cookies Swap | HttpOnly | Web Developer | AllCookies | DOM Inspector | FormFox | Poster | XSS-Me | SQL Inject-Me | CrossFTP | FireFTP | FireKeeper | ffsniff | Oracle DBA ToolBar | Oracle OraDB Error Code Look-up | MySQL Client | SQLite Manager | JiWire | Greasemonkey (Scripts) | Technika | FileEncrypter | Net-force tools | FireGPG | MDHashTool | QArchive.org web files checker | Dr.Web anti-virus link checker | ClamWin Antivirus Glue for Firefox | Refspoof | iMacros | Enhanced History Manager | Slogger | Open Source Vulnerability Database Search | US Homeland Security Threat

Get the FireCAT list dontstealmyrsshackosis

Perfect for children or a web kiosk. ProCon Latte is a Firefox extension to filter out unwanted or offensive content from the web. Forget about setting up a proxy with expensive equipment. ProCon Latte allows you to set a password to keep others from changing settings. This Firefox add-on also enables a whitelist to be implemented, thus blocking all websites except ones specified.

Check out the screenshots (don’t mind the colors, this is just my Gnome theme):

Download ProCon Latte | Mozilla Developer Site

I hear a lot of people that are whole heartedly against saving passwords in their browser. I would agree if these were not encrypted in any way, but by implementing a master password in Firefox, we can encrypt our saved passwords. Beware that any passwords saved before you set your master password are NOT encrypted and it is still possible for malicious code to steal your passwords through a web site.

Just for giggles, I will to try to crack my Firefox master password. I will do this by using Nagareshwar Talekar’s FireMaster Firefox master password recovery tool.

Firemaster is a Windows only tool so I am going to load it up in my VMware and see how long it takes to crack my Firefox master password.

Download Firemaster.

Extract the Firemaster.exe to a folder, like your desktop.

I am going to use the brute force method. If you like, run firemaster without options to see the syntax switches. The most important switches are the -n for number of characters and the -a to specify which characters to use when brute forcing. Now run FireMaster as so:

Read the rest of this entry …

Overall I am happy with the new features in Firefox 3. I would like to share with you what I have found so far.

About:

Read the rest of this entry …

Automatically generates per-site passwords if you prefix your password with @@ or press F2 beforehand. Prevents JavaScript from reading your password as it is typed. The same password will be generated at each subdomain: a.example.com matches…

Very interesting and easy way to secure passwords via password hashes.

Get it @ https://addons.mozilla.org/en-US/firefox/addon/1033

Every time I do a new Linux install my Firefox is so slow resolving DNS. The reason for this is that Firefox has IPv6 enabled by default. I disabled it and my Firefox browsing is 10x faster.

1. Type about:config in the address bar.
2. Type IPv6 in the filter box.
3. Double click network.dns.disableIPv6 to set the value to true.

Simple huh? The Firefox team should disable this option by default. 99% of people right now aren’t using IPv6.