AuRA - Auth. Request Analyser
Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.
What is AuRA - Auth. Request Analyser?
AuRA - Auth. Request Analyser is a Chrome extension developed by https://security.lauritz-holtmann.de, and its main feature is "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.".
Extension Screenshots
Download AuRA - Auth. Request Analyser Extension CRX File
Download AuRA - Auth. Request Analyser extension files in crx format, manually install Chrome extensions in the browser, or share the crx files with friends to easily install Chrome extensions.
Extension Usage Instructions
This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.
Features:
• View request parameters at a glance, either via the popup or the developer tools panel.
• Hover over standardised parameters for background information about parameters.
• Manually modify request parameters.
• Detailed Analysis of request parameters:
• Observations: Informational findings within the Auth. Request.
• Recommendations: Hardening measures directly identified within the current Auth. Request.
• Attacks: Proposed further test cases, can be automatically executed with one click.
• Search history for Auth. Request and replay the request.
• Indicate with a badge if the currently visited page appears to be an Auth. Request.
• Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect.
• Manually trigger analysis. Extension Basic Information
| Name |  AuRA - Auth. Request Analyser |
| ID | clonpaankbndgnciijbiokgjeofjdpeg |
| Official URL | https://chromewebstore.google.com/detail/aura-auth-request-analyse/clonpaankbndgnciijbiokgjeofjdpeg |
| Description | Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests. |
| File Size | 24.22 KB |
| Installation Count | 183 |
| Current Version | 1.1 |
| Last Updated | 2022-03-30 |
| Publish Date | 2021-11-11 |
| Developer | https://security.lauritz-holtmann.de |
| [email protected] | |
| Payment Type | free |
| Extension Website | https://github.com/lauritzh/auth-request-analyser |
| Help Page URL | https://twitter.com/_lauritz_ |
| Privacy Policy Page URL | https://security.lauritz-holtmann.de/privacy |
| Supported Languages | en |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"manifest_version": 3,
"name": "AuRA - Auth. Request Analyser",
"version": "1.1",
"action": {
"default_popup": "application.html"
},
"devtools_page": "devtools.html",
"background": {
"service_worker": "background.js"
},
"permissions": [
"tabs",
"storage",
"history"
],
"description": "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.",
"icons": {
"128": "aura_logo_favicon.png"
}
} | |
