https://flatt.tech/research/tags/chrome/ Recent content in Chrome on GMO Flatt Security Research Hugo en Wed, 25 Dec 2024 00:00:00 +0000 https://flatt.tech/research/posts/non-intrusive-web-recon-techniques-from-chrome-devtools-recorder/ Wed, 25 Dec 2024 00:00:00 +0000 https://flatt.tech/research/posts/non-intrusive-web-recon-techniques-from-chrome-devtools-recorder/ <h2 id="introduction-the-art-of-non-intrusive-web-recon">Introduction: The Art of Non-Intrusive Web Recon</h2> <p>Hello, I&rsquo;m pizzacat83 (<a href="https://twitter.com/pizzacat83" target="_blank" rel="noopener">@pizzacat83</a> ), a software engineer at Flatt Security Inc.</p> <p>When hunting for bugs, understanding the behavior of a target application is invaluable. The more knowledge you gain about the application—where each functionality resides, how pages and APIs interconnect—the greater your ability to pinpoint weaknesses and unravel vulnerabilities.</p> <p>Imagine a tool that could seamlessly assist with this process, extracting key insights from the browser in real-time as you navigate through the application. A tool that, while you click through the interface, captures the underlying DOM structure, traces interactions, and reveals valuable data connections—all without disrupting your flow. This would make it possible to map the application’s behavior as you go, without needing to slow down to document every detail manually.</p>