Qu'est-ce que Spectroscope ?

Spectroscope est une extension Chrome développée par Lukas Weichselbaum, et sa fonction principale est "Search for endpoints potentially vulnerable to Spectre.".

Captures d'Écran de l'Extension

Télécharger le fichier CRX de l'extension Spectroscope

Téléchargez les fichiers d'extension Spectroscope au format crx, installez manuellement les extensions Chrome dans le navigateur ou partagez les fichiers crx avec des amis pour installer facilement les extensions Chrome.

Instructions d'Utilisation de l'Extension

Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools "Spectroscope" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum

Informations de Base sur l'Extension

Nom	Spectroscope
ID	idppnaadbabknjeaifkegolcciafchpp
URL Officiel	https://chromewebstore.google.com/detail/spectroscope/idppnaadbabknjeaifkegolcciafchpp
Description	Search for endpoints potentially vulnerable to Spectre.
Taille du Fichier	5.5 MB
Nombre d'Installations	232
Version Actuelle	0.1.0
Dernière Mise à Jour	2021-08-19
Date de Publication	2021-03-07
Évaluation	5.00/5 Total 2 Évaluations
Développeur	Lukas Weichselbaum
Email	[email protected]
Type de Paiement	free
Langues Prises en Charge	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "name": "Spectroscope", "version": "0.1.0", "description": "Search for endpoints potentially vulnerable to Spectre.", "icons": { "128": "icon128.png" }, "manifest_version": 2, "devtools_page": "devtools.html", "permissions": [ "cookies", "http:\/\/\/", "https:\/\/\/", "storage" ], "background": { "persistent": false, "scripts": [ "background.js" ] } }