Spectroscope

Search for endpoints potentially vulnerable to Spectre.

Co to jest Spectroscope?

Spectroscope to rozszerzenie Chrome opracowane przez Lukas Weichselbaum, a jego główną funkcją jest „Search for endpoints potentially vulnerable to Spectre.”.

Zrzuty ekranu rozszerzenia

screenshot
screenshot
screenshot
screenshot
screenshot

Pobierz plik CRX rozszerzenia Spectroscope

Pobierz pliki rozszerzeń Spectroscope w formacie crx, zainstaluj ręcznie rozszerzenia Chrome w przeglądarce lub udostępnij pliki crx znajomym, aby łatwo zainstalować rozszerzenia Chrome.

Instrukcja Użytkowania Rozszerzenia

                        Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools "Spectroscope" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum                    

Podstawowe informacje o rozszerzeniu

Nazwa Spectroscope Spectroscope
ID idppnaadbabknjeaifkegolcciafchpp
Oficjalny URL https://chromewebstore.google.com/detail/spectroscope/idppnaadbabknjeaifkegolcciafchpp
Opis Search for endpoints potentially vulnerable to Spectre.
Rozmiar pliku 5.5 MB
Liczba instalacji 232
Aktualna Wersja 0.1.0
Ostatnia Aktualizacja 2021-08-19
Data Publikacji 2021-03-07
Ocena 5.00/5 Łącznie 2 Oceny
Deweloper Lukas Weichselbaum
E-mail [email protected]
Typ Płatności free
Obsługiwane Języki en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "Spectroscope",
    "version": "0.1.0",
    "description": "Search for endpoints potentially vulnerable to Spectre.",
    "icons": {
        "128": "icon128.png"
    },
    "manifest_version": 2,
    "devtools_page": "devtools.html",
    "permissions": [
        "cookies",
        "http:\/\/*\/*",
        "https:\/\/*\/*",
        "storage"
    ],
    "background": {
        "persistent": false,
        "scripts": [
            "background.js"
        ]
    }
}