PERS - The Passive Expired Resource Scanner

A passive scanning tool for finding expired domain vulnerabilites while you browse.

Co je PERS - The Passive Expired Resource Scanner?

PERS - The Passive Expired Resource Scanner je rozšíření Chrome vyvinuté https://thehackerblog.com, a jeho hlavní funkcí je „A passive scanning tool for finding expired domain vulnerabilites while you browse.“.

Snímky obrazovky rozšíření

screenshot

Stáhnout soubor CRX rozšíření PERS - The Passive Expired Resource Scanner

Stáhněte si soubory rozšíření PERS - The Passive Expired Resource Scanner ve formátu crx, ručně nainstalujte rozšíření Chrome do prohlížeče nebo sdílejte soubory crx s přáteli, abyste jednoduše nainstalovali rozšíření Chrome.

Pokyny pro Použití Rozšíření

                        A Chrome extension which detects expired domains in webpage resources (such as external images, CSS, and JavaScript) while you browse. Once detected it alerts you to the details and offers multiple ways to verify that the domain is expired. These vulnerabilities often allow for hijacking of the vulnerable webpage.

Useful for penetration testers and auditors who wish to automatically identify these vulnerabilities passively while they browse.

Reason for various permissions requested by extension:
* webRequest: Required to hook the onErrorOcurred function in Chrome to detect when a resource load has resulted in a network error occurring (e.g. "net::ERR_NAME_NOT_RESOLVED").
* webRequestBlocking: Required to block and add headers for certain domain availability querying APIs (e.g. add Origin header).
* : Required because we have to be able to detect failed network loads for resources from any domain/URL.                    

Základní Informace o Rozšíření

Název PERS - The Passive Expired Resource Scanner PERS - The Passive Expired Resource Scanner
ID jenkmpdppepcfhjpfgbgehfklnoopeei
Oficiální URL https://chromewebstore.google.com/detail/pers-the-passive-expired/jenkmpdppepcfhjpfgbgehfklnoopeei
Popis A passive scanning tool for finding expired domain vulnerabilites while you browse.
Velikost souboru 695 KB
Počet instalací 103
Aktuální Verze 0.0.2
Poslední Aktualizace 2016-10-09
Datum Vydání 2016-10-08
Vývojář https://thehackerblog.com
E-mail [email protected]
Typ Platby free
Webové stránky Rozšíření https://thehackerblog.com
Podporované Jazyky en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "PERS - The Passive Expired Resource Scanner",
    "version": "0.0.2",
    "manifest_version": 2,
    "description": "A passive scanning tool for finding expired domain vulnerabilites while you browse.",
    "homepage_url": "https:\/\/thehackerblog.com\/",
    "content_security_policy": "default-src 'self' https:\/\/thehackerblog.com; style-src * https:\/\/fonts.googleapis.com; img-src *; font-src *; connect-src *;",
    "icons": {
        "16": "icons\/icon16.png",
        "48": "icons\/icon48.png",
        "128": "icons\/icon128.png"
    },
    "default_locale": "en",
    "background": {
        "page": "src\/bg\/background.html",
        "persistent": true
    },
    "permissions": [
        "webRequest",
        "webRequestBlocking",
        ""
    ]
}