AuRA - Auth. Request Analyser
Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.
什么是AuRA - Auth. Request Analyser？
AuRA - Auth. Request Analyser是由https://security.lauritz-holtmann.de开发的Chrome扩展程序，该扩展的主要功能是“Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.”。
扩展截图
下载AuRA - Auth. Request Analyser扩展crx文件
下载AuRA - Auth. Request Analyser扩展crx格式的文件，手动将Chrome插件安装到浏览器中，也可以将crx文件分享给朋友，轻松安装Chrome插件。
扩展使用说明
This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.
Features:
• View request parameters at a glance, either via the popup or the developer tools panel.
• Hover over standardised parameters for background information about parameters.
• Manually modify request parameters.
• Detailed Analysis of request parameters:
• Observations: Informational findings within the Auth. Request.
• Recommendations: Hardening measures directly identified within the current Auth. Request.
• Attacks: Proposed further test cases, can be automatically executed with one click.
• Search history for Auth. Request and replay the request.
• Indicate with a badge if the currently visited page appears to be an Auth. Request.
• Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect.
• Manually trigger analysis. 扩展基本信息
| 名称 |  AuRA - Auth. Request Analyser |
| ID | clonpaankbndgnciijbiokgjeofjdpeg |
| 官方URL | https://chromewebstore.google.com/detail/aura-auth-request-analyse/clonpaankbndgnciijbiokgjeofjdpeg |
| 简介 | Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests. |
| 文件大小 | 24.22 KB |
| 安装次数 | 183 |
| 当前版本 | 1.1 |
| 更新时间 | 2022-03-30 |
| 上架时间 | 2021-11-11 |
| 开发者 | https://security.lauritz-holtmann.de |
| 电子邮箱 | [email protected] |
| 付费类型 | free |
| 扩展官网 | https://github.com/lauritzh/auth-request-analyser |
| 帮助页面URL | https://twitter.com/_lauritz_ |
| 隐私政策页面URL | https://security.lauritz-holtmann.de/privacy |
| 支持的语言 | en |
| manifest.json | |
{
"update_url": "https:\/\/clients2.google.com\/service\/update2\/crx",
"manifest_version": 3,
"name": "AuRA - Auth. Request Analyser",
"version": "1.1",
"action": {
"default_popup": "application.html"
},
"devtools_page": "devtools.html",
"background": {
"service_worker": "background.js"
},
"permissions": [
"tabs",
"storage",
"history"
],
"description": "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.",
"icons": {
"128": "aura_logo_favicon.png"
}
} | |
