Page 1 of 1

Stegosploit

Posted: Thu Sep 01, 2016 2:13 pm
by User98978
Does NoScript protect from Stegosploit?
If no, when it will?

Re: Stegosploit

Posted: Thu Sep 01, 2016 3:32 pm
by barbaz
https://www.endgame.com/blog/stop-sayin ... it-exploit
User98978 wrote:Does NoScript protect from Stegosploit?
Yes it does on any site you didn't allow, simply by blocking executing (or in some case even downloading) the code. NoScript also has MIME type enforcement which might have some effect there as well.

Re: Stegosploit

Posted: Thu Sep 01, 2016 10:44 pm
by Thrawn
Stegosploit itself isn't really something to protect you from. If someone is making use of it as a way of delivering a payload, then that means they have already gained control.

But yes, MIME type enforcement can help.