20 replies to this topic

[Motasem]

Hello every one  i need help with ...

 

i want to give some public users a copy of portable firefox i have made some setting on it and add proxy and cookies in browser and hide some buttons in pages

so i want to secure it b4 giving it to the users

i have installed some security Add-ones to firefox like Public Fox And addblock plus + element hide and some other tools
now my problem is if any user go in the profile folder for the portable firefox copy and deleted all the EXTENSTIONS  he can start the browser without any restrictions or security and change proxy and delete cookies
 

so how i protect this folder from chaning or deleting its content specialy the extenstions folder in profile ???

[Wonko the Sane]

Missing info. :frusty;

WHAT Operating System is that?

Is it a PC that you have setup in a given way and to which you want to give access to "some public user"?

Is the filesystem NTFS?

WHICH "level" of access/permissions will the "some public user" get/need?

OR are you trying to create a "portable app" of some kind?

 

The more you explain the background/intended usage, etc. the more likely that someone can provide you with a solution or a workaround.

 

Wonko

[Motasem]

Hey Wonko long time
first my friend the users will use windows xp/vista/7/8 and lol u must know that coz i said public users so its mix enviroment
 

and its portabl firefox i have made some changes and lock options and archive it with 7zip i didnt make it setup

 

and for the file system i dont know what users format there pc's !

 

i already controle the permissions to the users i have made bookmark and restict access to change bookmarks and made it the home page so when the browser start it will open a website with cookie already in the browser and proxy ( the proxy i use because if site detect multiple users login he will logout all users so when all working same proxy they will be treated as 1 user )
 

and yes its already a portable app i ionly give them the archived file and they extracte it and open the browser but some users abuse it by trying to change the setting and when they cant they delete the extensions and start the browser again !!! so all my security setting are gone and browser back to normal

[Motasem]

here my friend i will give u the browser i made so u understand me better

 

i want you to download it and run it and see how i secure it from almost every thing can be changed and when it start it will lead u to the website called bytebx.com and already logged in /// until there every thing fine and ok

 

but close the portable firefox and go in profile folder and locate the hiden extension folder and delete all its content and open it again u will see that every thing back to normal without security !!!

and thats my points i want to protect it or all the profile folder

any ideas are welcome

note: please dont change the proxy  or log out from the account

thanks WonKo

[Blackcrack]

Mozilla command line options
 
VLC Command line Help
 
App Starter Creator
 
firefox.exe -profile ./profile
 
thunderbird.exe -profile ./profile
 
(profile-folder it is the name of you choice of you profile folder )
 
App-Starter-Creator was an idea from me, Michal had it programmed
 
best regards
Blacky


p.s. Uniloader it is in german but works also good, i hope he let translate it in future
Uniloader Creator
(both programmers have the idea from me .. ringli and Michal)

[Motasem]

mmmmm i have an idea but i dont know how to make it i will explain

how can i make all this browser only 1 protected file so when users download it they will find only 1 file when they click on it will silently extract its files to hidden folder in temp for example or in any deep folder  in windows  and when the extraction finished the browser starts so they can use it and when they are done and close the browser all its files ectracted in the temp are deleted !!! so that i make sure users cant find it

and every time they want to open it they must click on the single file and it will do the same proccess again and make sure the single file cannot be extracted or open its content

 

i think its good idea i came up with but i need some one to lead me how to do it

[Wonko the Sane]

NO ideas, sorry.

I doubt that such a thing is possible at all, in the sense that what you want to do can IMHO only be done by re-compiling the browser from sources (after having modified them to hardcoded site(s) and/or profiles/extensions).

Any sfx will do that (uncompress to a temporary folder and then run the app from it) but it's trivial to re-run the app from the temp folder and/or copying it from there to another place and then re-run it.

 

BTW you are still into asking how to do something through the specific means that you have devised, which may be different from asking how to do something (final GOAL)

Risk of slipping on a chocolate covered banana :

http://homepage.ntlw...red-banana.html

 

 

Wonko

[Motasem]

Mozilla command line options
 
VLC Command line Help
 
App Starter Creator
 
firefox.exe -profile ./profile
 
thunderbird.exe -profile ./profile
 
(profile-folder it is the name of you choice of you profile folder )
 
App-Starter-Creator was an idea from me, Michal had it programmed
 
best regards
Blacky

thanks i will try this App-Starter-Creator right away and report
thanks man

[Motasem]

Wonko ( re-run the app from the temp folder )
no i want it to be deleted from temp when the browser closed and if the user want to start the browser again it will do the process from begining
dose that looks good ?

[Blackcrack]

you idea.. humm.. all what you can do it is to use the Mozilla command line options,
if you want more, mus you learn programming and/or create an plugin for
you profile who can do this.. behind it is only an question of you own profile
folders and you own plugin .. who you mus create for that.. but in this case
mus you go to the Pluginscreator from the Plugincommunity around the Firefox/Thunderbird

this place (reboot.pro) it is maybe not the right one for Plugins for Mozillasoft

best regards
Blacky

[Motasem]

you idea.. humm.. all what you can do it is to use the Mozilla command line options,
if you want more, mus you learn programming and/or create an plugin for
you profile who can do this.. behind it is only an question of you own profile
folders and you own plugin .. who you mus create for that.. but in this case
mus you go to the Pluginscreator from the Plugincommunity around the Firefox/Thunderbird

this place (reboot.pro) it is maybe not the right one for Plugins for Mozillasoft

best regards
Blacky

yea i know and all my post is about how to secure the folder profile and give the firefox.exe only the access for it ... so im not asking for plugin or coding ... so my point is to share ideas and thoughts
u know what i did last time ? i made a .bat file and name it profile and gave it icon like folder so the users who tryed to go in that folder when they click on it hehe all the profile deleted because i have put a code in the bat file to del *.* /s /q
but soon they know it and unhide the orginal folder

so i need new idea and alot can be made

[Blackcrack]

humm, maybe create an container with AES - Encoding ..
it is give there not an portable programm who can work
with Truecrypt Containers ?
Humm.. on the fast I do not know just the names of
this portable program who can work with..
humm.. only as a fast suggestion ..

best regards
Blacky

[Motasem]

i tried app starter but failure in fact after im done and start it it started over 500 process of its own and i had to restart my PC by button LoL
i don't really  know programing so may be i used it wrong

 

mmmmm let me please say it again in short words

 

i want to create portable app with only 1 executable file without making temp files or the ability to extract it ???? i think this's the best question

[florin91]

here my friend i will give u the browser i made so u understand me better

http://www.mediafire...tebX-Browser.7z
 

i want you to download it and run it and see how i secure it from almost every thing can be changed and when it start it will lead u to the website called bytebx.com and already logged in /// until there every thing fine and ok

 

but close the portable firefox and go in profile folder and locate the hiden extension folder and delete all its content and open it again u will see that every thing back to normal without security !!!

and thats my points i want to protect it or all the profile folder

any ideas are welcome

note: please dont change the proxy  or log out from the account

thanks WonKo

Don't think it's a good idea to leave the archive here, someone else might download it ... 

 

Hmm, premium account, nice.

 

Spoiler

Don't worry, I don't "need" it or take it

 

Thanks!. 

[Motasem]

no problem because i trust every one here and yes its premium and thats my point to give my account to users to use without abusing it but u cant trust them all most of them want to get the cookies and more other things thats why im trying to protect it

[Wonko the Sane]

Wonko ( re-run the app from the temp folder )
no i want it to be deleted from temp when the browser closed and if the user want to start the browser again it will do the process from begining
dose that looks good ?

No, meaning that that is how *any* SFX would behave, but nothing prevents a slightly less than naive user to access the temp folder WHILE the first instance of the browser is running and either change the actual extracted.exe permissions (to prevent it to be deleted by the closing SFX) or to copy the .exe to *somewhere* else and then re-running it.

 

And yes you should as soon as you can delete that file (I am not going to download it BTW).

 

Wonko

[florin91]

no problem because i trust every one here and yes its premium and thats my point to give my account to users to use without abusing it but u cant trust them all most of them want to get the cookies and more other things thats why im trying to protect it

 

You can try and protect it, but not everything is bulletprof. 

 

For example, I downloaded your archive, opened the program and seen I can't change much. Then started Wireshark while running it and saw your interesting PHPSESSID cookies and then I could log in without any problem.

 

What can you do against this? Nothing ...  

[Motasem]

i know about this but they r not hackers and nothing can stop snifiing it .

[florin91]

And probably you should know this, also: http://bytebx.com/page-terms They may wont like this account sharing. 

 

I'm not a lawyer, but all these sites have some terms pages to read.

 

And this remembers me of another website which has terms: http://reboot.pro/to...-site-policies/

[Motasem]

its turn on me now? ok forget about the premium account just foucse on my request please !!!
i didnt say anything more than i want to pack a portable firefox into 1 single excutable file for lanughing it from
thanks

[Blackcrack]

an exefile who starts an virtualfs driver and stay tsr so long like run the internal programm(like firefox&thunderbird)
and open the container for execute the portable Thunderbird .. or Firefox .. with thunderbird make it sense also..

an sandbox .. i have read about an program "make you application portable in an Sandbox" something like that .. freeware ..

i have to much freeware in my Windows Tree on my server in the basement.. (all with drivers now ~1Tb from the last 10-15 Years, the best Software&Drivers.. my server it's something like an Terminal-"Mailbox"(old Times)-junky of Free&Opensource-ware Drug *g*
it should exist something, on the freeware sector ..
i hold it in my mind and search it on my server and hold my eyes open in the next time ..

have found something .. something like that ? Enigma Virtual Box
but something should give as Free so like i know..

best regards
Blacky