
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Manage and search browser histories across multiple browsers and browser profiles.
EARLY DEV BUILD. NOT INTENDED FOR WIDESPREAD USE. USE AT YOUR OWN RISK.
The wiki has more info about the project's philosophy.
I use multiple browsers and multiple browser profiles. This scatters my history, bookmarks across multiple interfaces.
Whenever I wish to search something, I have to go through them all until I find them. I wish to build a tool which will read browser profile files and combine the history and bookmarks list, ready to be searched and organized automatically.
Initial idea is to read the broswer's sqlite3 database files and copy and combine the data in one place, then allow simultaneous keyword and date range search on it. More features for searching and organization and maybe an ML algo to recommend from within the combined history and the web will be implemented.
Note: Play with it, I haven't made it Demo-ready yet. It shouldn't damage anything, but if it is does... THIS IS A USE AT YOUR OWN RISK SOFTWARE.
It is Windows ONLY for now. I got it working with my personal installation of Linux Mint. Watch this space.
Easy to make it work for other OSes. Changing path locations for browser profile folder should make it work on other OS. (TODO)
Following functionality has been implemented as of Jan 30, 2018:
Future Plans:
Install the required software if it is not already installed.
Open terminal (In windows, these are cmd.exe and powershell).
Navigate to the directory/folder where you wish to store the files. In this example, we will do this on the windows Desktop. In the terminal window, type the command:
cd C:\Users\<your username>\Desktop (press ENTER).
Clone this repo's master
branch using the command:
git clone "https://github.com/kchawla-pi/united-states-of-browsers.git"
Navigate into the newly created directory/folder:
cd united-states-of-browsers
Make a virtual environment using:
python -m venv venv
Activate the virtual environment:
venv\Scripts\activate
Install the required python packages:
pip install -r requirements.txt
Install the project:
pip install .
or if you wanna play with the code;
pip install --editable .
To merge the databases and launch the user interface, run:
python .\united_states_of_browsers\run_usb.py
Then go to your browser of choice and visit:
localhost:5000
To stop, go back to the same terminal window where the program is running and press Ctrl+C
.
Deactivate the virtual environment by typing deactivate
and pressing ENTER.
Merging the database will generate an sqlite file in the ~\USB\
directory/folder, where ~
is the user directory/folder.
In windows this is typically C:\Users\<user name>
Currently tests are not available.
To run tests (requires pytest), type:
pytest
FAQs
Manage and search browser histories across multiple browsers and browser profiles.
We found that usb demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.