beefproject/beef

update GetStoredCredentials, senglehardt.com, login manager autofill

Open

#1,974 opened on Jul 21, 2020

View on GitHub
 (2 comments) (0 reactions) (0 assignees)JavaScript (1,992 forks)batch import
Feature RequestGood First IssueLowModule

Repository metrics

Stars
 (8,637 stars)
PR merge metrics
 (Avg merge 11h 55m) (19 merged PRs in 30d)

Description

I was surprised not to find this trick among the modules https://senglehardt.com/demo/no_boundaries/loginmanager/ Its work in last Chrome_v83 (https require). It has been known since 2017. Need update Commands->Browser->HookedDomain->GetStoredCredentials

Contributor guide

Research direction
Research the senglehardt.com demo to understand the autofill credential stealing technique, then implement it as a new module or update the existing GetStoredCredentials command in beefproject/beef.
Tech stack
javascript
Domain
security
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
2
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-3 hours
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
GitJavaScript
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65