Skip to content

Module: Detect LastPass

Jump to bottom
Isaac Powell edited this page Feb 24, 2022 · 7 revisions

Summary

Describe the following things:

  • Objective: This module checks if the LastPass extension is installed and active
  • Date: 2013.Updated 2022
  • Authors: xntrik, DeezyE
  • Browsers: Firefox, Chrome
  • Code: modules/browser/detect_lastpass

Internal Working

The module first generates a hidden <input> field within the page <body>. The hidden <input> field is intended to allow the LastPass extension to add it's unique attribute artifacts within the page even if there would normally be no forms present. The detection of the LastPass artifacts occurs either via the background image added to input fields:

Or via the LastPass iframe

The module will output result to the UI depending on which artifact was found

Firefox Specific Considerations

Firefox requires some user interaction on a page (clicks) in order to allow the browser extension to read updated HTML on the page. So for successful detection of the generated (hidden) input field, there is an additional 5 second timeout which is intended to allow the user to interact with the page thus allowing the LastPass extension to add it's attributes to the <input> field.

User Guide

I. Introduction   |   II. Basic Utilization   |   III. Advanced Utilization   |   IV. Development   |   V. References

Community

Blog   |   Code   |   Youtube   |   Twitter

I - Starting BeEF

  1. Introducing BeEF
  2. Installation
  3. Basics
  4. Troubleshooting

II - Basic Utilization

  1. Configuration
  2. Interface
  3. Information Gathering
  4. Social Engineering
  5. Network Discovery
  6. Metasploit
  7. Tunneling
  8. XSS Rays
  9. Persistence
  10. Creating a Module
  11. Geolocation
  12. Using-BeEF-With-NGROK

III - Advanced Utilization

  1. RESTful API
  2. Autorun Rule Engine
  3. Notifications
  4. Console
  5. WebRTC Extension

IV - Development

  1. Contributing
  2. ActiveRecord
  3. Development Organization
  4. Architecture
  5. BeEF Javascript API
  6. Step By Step Module Creation
  7. Creating a New Extension
  8. BeEF Testing
  9. Browser & OS Compatibility
  10. Database Schema
  11. Development Milestones
  12. Command Module Config
  13. Command Module API

V - References

  1. FAQ
  2. Other
  3. References
  4. Modules
  5. Release Notes
Clone this wiki locally