The classifier judged this item not relevant to AI security, so it is left out of lists, feeds, the API and dataset releases. If that is wrong, report a correction on this page.
InfoNews
Offensive BPF: Sniffing Firefox traffic with bpftrace
- Published
- Record updated
Summary
The author describes learning to hook user space APIs with bpftrace uprobes to sniff Firefox TLS traffic, since the existing sslsniff-bpfcc tool does not work with Firefox or Chrome. The post identifies Firefox's bundled NSS libraries (libnspr4.so, libnss3.so) as the TLS implementation and uses PR_Write in libnspr4.so as the hook point to print outgoing buffers. The post is part of a series on how BPF affects offensive security, malware and detection engineering.