News for hackers. Stuff that matters.
Re:Show HN: I'm Building a Browser for Reverse Engineers by nullpt_rs on Tuesday October 07, 2025 @02:46PM (#45507104)
Thanks for sharing some examples! Someone shared a similar project in the other thread. I didn’t realize this at the time of writing haha.

FWIW I still think modifying the browser has some positives wrt stealth and hooking out of process frames (could be wrong on the second part, haven’t actually tested!)

Still good to know though will leave a note in the article :-)

Re:Show HN: I'm Building a Browser for Reverse Engineers by tbrockman on Tuesday October 07, 2025 @03:09PM (#45507421)
Yeah, there's a pretty overwhelming amount of browser APIs and functionality which isn't always (well-)documented to learn about. If I recall correctly Proxies wouldn't be detectable (seems to be supported by https://exploringjs.com/es6/ch_proxies.html#sec_detect-proxi...) so long as your injected content script runs first (otherwise other code could presumably override the Proxy constructor). You should also be able to hook any embedded frames by setting `target: { ..., allFrames: true }`.
Re:Show HN: I'm Building a Browser for Reverse Engineers by 2bird3 on Tuesday October 07, 2025 @06:17PM (#45509627)
To note, there are undocumented detections to even Proxys, for example using `in` operator in v8 (such as `proxiedFunc in 1` for some proxied function). Really cool to see a project like this.
Re:Show HN: I'm Building a Browser for Reverse Engineers by webstrand on Wednesday October 08, 2025 @12:03AM (#45511938)
How do you use `in` in v8 to detect proxies? I assume its a difference in the exception, but the message and the cause were the same in both direct and proxied `x in 1`.
Re:Show HN: I'm Building a Browser for Reverse Engineers by 2bird3 on Wednesday October 08, 2025 @09:41AM (#45516093)
Ah wow, good catch- yeah, you're right, this technique seems to be patched