Jump to content

Anti-phising and ssl/tls filtering not working in Firefox Developer Edition


Recommended Posts

  • Administrators

I have no problem here:

image.png

If you check information about the certificate used on this forum, do you see ESET there?

image.png

 

As for SSL filtering, it is important to keep it enabled since more and more malware is downloaded via https and the number of malicious websites utilizing SSL is growing as well. Also the fact that browsers are starting to report http connections as unsecure, bad guys have a good motivation to move to https as well.

By coincidence last week I attended a presentation by an ethical hacker who attempted to attack a machine utilizing Meterpreter. He failed once thanks to SSL filtering employed by ESET. When he managed to bypass it, the payload was detected and blocked upon injection by Advanced Memory Scanner.

Link to comment
Share on other sites

No I don't see ESET verification in the certificate when using Firefox Developer Edition:

1181277950_Annotation2019-09-22112102.png.0568fa4f026a0db71370f32e488ea4df.png

 

In the regular Firefox and Chrome it works just fine.

Eset detects the other AMTSO tests (eicar, cloudcar etc). The only test failing is the anti-phising one.

 

4 hours ago, Marcos said:

As for SSL filtering, it is important to keep it enabled since more and more malware is downloaded via https and the number of malicious websites utilizing SSL is growing as well. Also the fact that browsers are starting to report http connections as unsecure, bad guys have a good motivation to move to https as well.

By coincidence last week I attended a presentation by an ethical hacker who attempted to attack a machine utilizing Meterpreter. He failed once thanks to SSL filtering employed by ESET. When he managed to bypass it, the payload was detected and blocked upon injection by Advanced Memory Scanner.

Interesting story! I know the importance of SSL filtering so I always keep it on.

Edited by ECELeader
Link to comment
Share on other sites

4 hours ago, ECELeader said:

No I don't see ESET verification in the certificate when using Firefox Developer Edition:

Via Options -> Security Settings, open the Certificate store and verify if Eset's certificate is present under the Authorities store.

Edited by itman
Link to comment
Share on other sites

Thank you all for your help! The issue was solved after reinstalling all Firefox editions in my PC completely (removing the %AppData% folder as well) and reinstalling Firefox Developer Edition.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...