T1176 Browser Extension Persistence - CraigDonkin/Infrastructure GitHub Wiki

T1176: Browser Extension Persistence

Requires user permissions
Installed via
- app store downloads
- Social engineering
- Post compromise
Extension can browse to websites
Keylog
Install a RAT

Writing Chrome Extensions

https://developer.chrome.com/extensions/getstarted

Writing Firefox Extensions

https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/WebExtensions/Your_first_WebExtension

Writing Edge Extensions

https://docs.microsoft.com/en-us/microsoft-edge/extensions

⚠️ GitHub.com Fallback ⚠️