PERS - The Passive Expired Resource Scanner

A passive scanning tool for finding expired domain vulnerabilites while you browse.

Co to jest PERS - The Passive Expired Resource Scanner?

PERS - The Passive Expired Resource Scanner to rozszerzenie Chrome opracowane przez https://thehackerblog.com, a jego główną funkcją jest „A passive scanning tool for finding expired domain vulnerabilites while you browse.”.

Zrzuty ekranu rozszerzenia

screenshot

Pobierz plik CRX rozszerzenia PERS - The Passive Expired Resource Scanner

Pobierz pliki rozszerzeń PERS - The Passive Expired Resource Scanner w formacie crx, zainstaluj ręcznie rozszerzenia Chrome w przeglądarce lub udostępnij pliki crx znajomym, aby łatwo zainstalować rozszerzenia Chrome.

Instrukcja Użytkowania Rozszerzenia

                        A Chrome extension which detects expired domains in webpage resources (such as external images, CSS, and JavaScript) while you browse. Once detected it alerts you to the details and offers multiple ways to verify that the domain is expired. These vulnerabilities often allow for hijacking of the vulnerable webpage.

Useful for penetration testers and auditors who wish to automatically identify these vulnerabilities passively while they browse.

Reason for various permissions requested by extension:
* webRequest: Required to hook the onErrorOcurred function in Chrome to detect when a resource load has resulted in a network error occurring (e.g. "net::ERR_NAME_NOT_RESOLVED").
* webRequestBlocking: Required to block and add headers for certain domain availability querying APIs (e.g. add Origin header).
* : Required because we have to be able to detect failed network loads for resources from any domain/URL.                    

Podstawowe informacje o rozszerzeniu

Nazwa PERS - The Passive Expired Resource Scanner PERS - The Passive Expired Resource Scanner
ID jenkmpdppepcfhjpfgbgehfklnoopeei
Oficjalny URL https://chromewebstore.google.com/detail/pers-the-passive-expired/jenkmpdppepcfhjpfgbgehfklnoopeei
Opis A passive scanning tool for finding expired domain vulnerabilites while you browse.
Rozmiar pliku 695 KB
Liczba instalacji 103
Aktualna Wersja 0.0.2
Ostatnia Aktualizacja 2016-10-09
Data Publikacji 2016-10-08
Deweloper https://thehackerblog.com
E-mail [email protected]
Typ Płatności free
Strona Rozszerzenia https://thehackerblog.com
Obsługiwane Języki en
manifest.json
{
    "update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
    "name": "PERS - The Passive Expired Resource Scanner",
    "version": "0.0.2",
    "manifest_version": 2,
    "description": "A passive scanning tool for finding expired domain vulnerabilites while you browse.",
    "homepage_url": "https:\/\/thehackerblog.com\/",
    "content_security_policy": "default-src 'self' https:\/\/thehackerblog.com; style-src * https:\/\/fonts.googleapis.com; img-src *; font-src *; connect-src *;",
    "icons": {
        "16": "icons\/icon16.png",
        "48": "icons\/icon48.png",
        "128": "icons\/icon128.png"
    },
    "default_locale": "en",
    "background": {
        "page": "src\/bg\/background.html",
        "persistent": true
    },
    "permissions": [
        "webRequest",
        "webRequestBlocking",
        ""
    ]
}