
Anti-MitM TLSCAPTCHA (PoC) ruma Anon
This extension uses your CAPTCHA answer to verify TLS certificate that you get from website you're visiting. Warning: you can see it in action only if a website has server-side part of such verification scheme.
You'll need Firefox to use this extension
Richintzij K'amal
Chi rij re k'amal re'
Every time when you solve CAPTCHA, the CAPTCHA answer can be used as a common secret for a short time. Mainly, It can be used to prevent TLS certificate spoofing.
Since ordinary web pages (and their JavaScript) doesn't have access to TLS certificate data, I was have to make this extension. Actually it does the following:
let clientsideDigest = <Digest of TLS certificate that you get from website you're visiting>;
let yourAnswer = <Your CAPTCHA answer>;
let resultDigest = PBKDF2(clientsideDigest, "SHA-512", yourAnswer);
//Where yourAnswer is PKBDF2 salt.
cookies["TLSCaptcha"] = representAsHexString(resultDigest);
To see it in action, you need to visit a website that have server-side implementation of this scheme.
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details.
New additional featue: you can use this addon to establish additional encryption. See source code for details.
Since ordinary web pages (and their JavaScript) doesn't have access to TLS certificate data, I was have to make this extension. Actually it does the following:
let clientsideDigest = <Digest of TLS certificate that you get from website you're visiting>;
let yourAnswer = <Your CAPTCHA answer>;
let resultDigest = PBKDF2(clientsideDigest, "SHA-512", yourAnswer);
//Where yourAnswer is PKBDF2 salt.
cookies["TLSCaptcha"] = representAsHexString(resultDigest);
To see it in action, you need to visit a website that have server-side implementation of this scheme.
At the moment of publishing this extension, there is no server-side implementations. If you want to make your own, please look into source code for details.
New additional featue: you can use this addon to establish additional encryption. See source code for details.
Tapaja' ri awetamab'al
Taq ya'oj q'ijTetamäx ch'aqa' chik
This add-on needs to:
- Tok pa ri taq ruwi' okik'amaya'l
- Nok pa ri taq atzij pa ronojel ri ajk'amaya'l ruxaq
Ch'aqa' chik etamab'äl
- Ruwäch
- 1.0.3
- Nimilem
- 13.92 KB
- Ruk'isib'äl k'exoj
- setahun yang lepas (17 Mei 2024)
- Taq Ruwäch Kiximon Ki'
- Ya'oj q'ij
- GNU General Public License v3.0 only
- Runatab'al Ruwäch
Titz'aqatisäx pa mol
Kich'utitzijol elesanem richin 1.0.3
~ Content script is no more.
~ Works properly with 'insecure context'.
~ Breaking change: only PBKDF2 is supported as verification hash.
+ Experimental feature: encrypted content support.
~ Works properly with 'insecure context'.
~ Breaking change: only PBKDF2 is supported as verification hash.
+ Experimental feature: encrypted content support.
Ch'aqa' chik taq k'amal richin Anon
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
- There are no ratings yet
WARNING: this extension cannot be ported to Chromium-based browsers due to API limitations.