Platform & Code (PCK)

Platform & Code

Grant can modify or expose data by influencing or altering JavaScript bridges, extensions or interprocess communication (e.g. shared memory, message passing, pipes, sockets)

Platform & Code

Grant can modify or expose data by influencing or altering JavaScript bridges, extensions or interprocess communication (e.g. shared memory, message passing, pipes, sockets)

How to play?

Scenario: Grant can modify or expose data by influencing or altering JavaScript bridges, extensions or interprocess communication (e.g. shared memory, message passing, pipes, sockets)

Example

Threat Modeling

STRIDE

What can go wrong?

What are we going to do about it?

Mappings

OWASP MASVS: PLATFORM-1,PLATFORM-2

OWASP MASTG: TEST-0007,TEST-0030,TEST-0033,TEST-0056,TEST-0072,TEST-0078

CAPEC: 137,138,499,502,586

SAFECode: -

Attacks

No attacks registered!

View source on GitHub