ThreatPinch Lookup
Add threat intelligence hover tool tips. IPv4, MD5, SHA2, CVE, FQDN or add your own ThreatIntel IOC. Use any REST API.
What is ThreatPinch Lookup?
ThreatPinch Lookup is a Chrome extension developed by ThreatPinch, and its main feature is "Add threat intelligence hover tool tips. IPv4, MD5, SHA2, CVE, FQDN or add your own ThreatIntel IOC. Use any REST API.".
Extension Screenshots
Download ThreatPinch Lookup Extension CRX File
Download ThreatPinch Lookup extension files in crx format, manually install Chrome extensions in the browser, or share the crx files with friends to easily install Chrome extensions.
Extension Usage Instructions
Creates on hover tooltips for every website for IPv4, MD5, SHA2, CVE or any custom IOC you define. Designed to work with any API, customization encouraged. Its the infosec threat and OSINT swiss army knife for your browser. Investigate less by taking your context with you.
Documentation here: https://github.com/cloudtracer/ThreatPinchLookup/wiki
Features:
- Add your own IOC's by setting your own Look up type via regex
- Create your own data connections, maybe add a data connection for your asset portal
- Sync your data requests with a CouchDB
- Filter look up requests so that you aren't looking up your own assets in online tools.
- Supports defanged IOCs
- Bulk IOC searching!
Out of the box integrations with:
- ThreatMiner for IPv4, FQDN, MD5, SHA1 and SHA2 lookups
- Alienvault OTX for IPv4, MD5, SHA1 and SHA2 lookups
- IBM X-Force Exchange for IPv4, FQDN lookups
- VirusTotal for MD5, SHA1, SHA2, FQDN lookups
- Cymon.io for IPv4 lookups
- ThreatCrowd for IPv4, FQDN and MD5 lookups
- Computer Incident Response Center Luxembourg (CIRCL) for CVE Lookups
- PassiveTotal for FQDN whois Lookups
- MISP for MD5 and SHA2
- Censys.io for IPv4 Lookups
- Shodan for IPv4 Lookups
- BlockChain.info for Bitcoin Lookups
- Zoomeye for IPv4 and FQDN lookups
- PulseDive for IPv4, FQDN and URL lookups
- Bitcoin Whos Who for Bitcoin lookups
- Recorded Future for IPv4, FQDN, MD5, SHA1 and SHA2 lookups
- Google Safe Browsing for URL lookups
- Have I Been Pwned for Email lookups
Some functionality not complete. ThreatPinch is still in a beta phase of testing, feedback is welcome. Extension Basic Information
| Name |  ThreatPinch Lookup |
| ID | ljdgplocfnmnofbhpkjclbefmjoikgke |
| Official URL | https://chromewebstore.google.com/detail/threatpinch-lookup/ljdgplocfnmnofbhpkjclbefmjoikgke |
| Description | Add threat intelligence hover tool tips. IPv4, MD5, SHA2, CVE, FQDN or add your own ThreatIntel IOC. Use any REST API. |
| File Size | 3.6 MB |
| Installation Count | 3,014 |
| Current Version | 3.0.6 |
| Last Updated | 2022-10-26 |
| Publish Date | 2018-08-18 |
| Rating | 4.75/5 Total 24 Ratings |
| Developer | ThreatPinch |
| [email protected] | |
| Payment Type | free |
| Extension Website | https://github.com/cloudtracer/ThreatPinchLookup |
| Help Page URL | https://github.com/cloudtracer/ThreatPinchLookup/wiki |
| Privacy Policy Page URL | https://cloudtracer.github.io/threatpinch/privacy.txt |
| Supported Languages | en |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"name": "ThreatPinch Lookup",
"short_name": "ThreatPinchLookup",
"version": "3.0.6",
"manifest_version": 2,
"description": "Add threat intelligence hover tool tips. IPv4, MD5, SHA2, CVE, FQDN or add your own ThreatIntel IOC. Use any REST API.",
"homepage_url": "http:\/\/www.ThreatPinch.com",
"icons": {
"16": "icons\/logo-tp16.png",
"48": "icons\/logo-tp48.png",
"128": "icons\/logo-tp128.png"
},
"default_locale": "en",
"background": {
"page": "src\/bg\/background.html",
"persistent": true
},
"options_page": "src\/options\/index.html",
"browser_action": {
"default_icon": "icons\/logo-tp48.png",
"default_title": "ThreatPinch Lookup",
"default_popup": "src\/page_action\/page_action.html"
},
"permissions": [
"https:\/\/*\/*",
"http:\/\/*\/*",
"contextMenus",
"storage",
"unlimitedStorage"
],
"web_accessible_resources": [
"icons\/ThreatPinch\/*",
"icons\/*",
"src\/options\/options.html",
"src\/options\/wizard.html",
"src\/options\/index.html",
"src\/options\/actions.html",
"src\/options\/popover.html",
"fonts\/owf\/*"
],
"content_security_policy": "script-src 'self'; object-src 'self'",
"content_scripts": [
{
"matches": [
"https:\/\/*\/*",
"http:\/\/*\/*"
],
"js": [
"src\/inject\/inject.js"
],
"css": [
"src\/inject\/inject.css"
],
"run_at": "document_end",
"all_frames": true
}
]
} | |
