AuRA - Auth. Request Analyser
Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.
AuRA - Auth. Request Analyserとは何ですか？
AuRA - Auth. Request Analyserはhttps://security.lauritz-holtmann.deによって開発されたChromeの拡張機能で、その主な機能は「Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.」です。
拡張機能のスクリーンショット
AuRA - Auth. Request Analyser拡張機能のCRXファイルをダウンロード
AuRA - Auth. Request Analyser拡張子のファイルをcrx形式でダウンロードし、ブラウザにChrome拡張機能を手動でインストールするか、crxファイルを友達と共有して簡単にChrome拡張機能をインストールします。
拡張機能の使用方法
This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.
Features:
• View request parameters at a glance, either via the popup or the developer tools panel.
• Hover over standardised parameters for background information about parameters.
• Manually modify request parameters.
• Detailed Analysis of request parameters:
• Observations: Informational findings within the Auth. Request.
• Recommendations: Hardening measures directly identified within the current Auth. Request.
• Attacks: Proposed further test cases, can be automatically executed with one click.
• Search history for Auth. Request and replay the request.
• Indicate with a badge if the currently visited page appears to be an Auth. Request.
• Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect.
• Manually trigger analysis. 拡張機能の基本情報
| 名前 |  AuRA - Auth. Request Analyser |
| ID | clonpaankbndgnciijbiokgjeofjdpeg |
| 公式URL | https://chromewebstore.google.com/detail/aura-auth-request-analyse/clonpaankbndgnciijbiokgjeofjdpeg |
| 説明 | Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests. |
| ファイルサイズ | 24.22 KB |
| インストール数 | 183 |
| 現在のバージョン | 1.1 |
| 最終更新日 | 2022-03-30 |
| 公開日 | 2021-11-11 |
| 開発者 | https://security.lauritz-holtmann.de |
| Eメール | [email protected] |
| 支払い方法 | free |
| 拡張機能のウェブサイト | https://github.com/lauritzh/auth-request-analyser |
| ヘルプページのURL | https://twitter.com/_lauritz_ |
| プライバシーポリシーページのURL | https://security.lauritz-holtmann.de/privacy |
| 対応言語 | en |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"manifest_version": 3,
"name": "AuRA - Auth. Request Analyser",
"version": "1.1",
"action": {
"default_popup": "application.html"
},
"devtools_page": "devtools.html",
"background": {
"service_worker": "background.js"
},
"permissions": [
"tabs",
"storage",
"history"
],
"description": "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.",
"icons": {
"128": "aura_logo_favicon.png"
}
} | |
