Wat is Spectroscope?

Spectroscope is een Chrome-extensie ontwikkeld door Lukas Weichselbaum, en de belangrijkste functie is "Search for endpoints potentially vulnerable to Spectre.".

Extensie Screenshots

Download het CRX-bestand van de extensie Spectroscope

Download Spectroscope-extensiebestanden in crx-indeling, installeer Chrome-extensies handmatig in de browser of deel de crx-bestanden met vrienden om Chrome-extensies eenvoudig te installeren.

Instructies voor het Gebruik van de Extensie

Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools "Spectroscope" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum

Basisinformatie over de Extensie

Naam	Spectroscope
ID	idppnaadbabknjeaifkegolcciafchpp
Officiële URL	https://chromewebstore.google.com/detail/spectroscope/idppnaadbabknjeaifkegolcciafchpp
Beschrijving	Search for endpoints potentially vulnerable to Spectre.
Bestandsgrootte	5.5 MB
Aantal Installaties	232
Huidige Versie	0.1.0
Laatst Bijgewerkt	2021-08-19
Publicatiedatum	2021-03-07
Beoordeling	5.00/5 Totaal 2 Beoordelingen
Ontwikkelaar	Lukas Weichselbaum
E-mail	[email protected]
Betalingswijze	free
Ondersteunde Talen	en
manifest.json
{ "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx", "name": "Spectroscope", "version": "0.1.0", "description": "Search for endpoints potentially vulnerable to Spectre.", "icons": { "128": "icon128.png" }, "manifest_version": 2, "devtools_page": "devtools.html", "permissions": [ "cookies", "http:\/\/\/", "https:\/\/\/", "storage" ], "background": { "persistent": false, "scripts": [ "background.js" ] } }