English
See more
Search websites for git repos, exposed config files, and more as you browse.
Latest Version
Version
1.0.12
Update
January 20, 2019
Size
198KiB
Developer
Category
Users
3,000+ 
Rating
3.75 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
Storage
See more
Bishop Vulnerability Scanner Extension
Bishop is a vulnerability scanner that searches websites in the background while you browse, looking for exposed version control systems, misconfigured administrative tools, and more. With a whitelisting regex system, you can easily restrict this tool to hosts that you are authorized to scan.
It works by searching for files with a given path on the current URL path and all parent paths, applying given regex to the results to check for proof positive of a vulnerable location. If the path returns 200 and matches the regex, it's flagged as vulnerable and alerts you. All rules are run on all directories in a set of time-staggered background XHR requests, so network throughput remains high at all times.
Bishop comes with a set of rules that hunt for the lowest hanging fruit, but the rule system is entirely extensible - rules are regular expressions that are run on specified directories, so if you can turn it into a regex, Bishop will look for it.
Bishop is intended SOLELY for legal use on web servers that you control or are permitted to scan, and the developers are not responsible for how you choose to use this software.
Bishop is MIT licensed and open source; contribute at https://github.com/jkingsman/bishop.
Read more
It works by searching for files with a given path on the current URL path and all parent paths, applying given regex to the results to check for proof positive of a vulnerable location. If the path returns 200 and matches the regex, it's flagged as vulnerable and alerts you. All rules are run on all directories in a set of time-staggered background XHR requests, so network throughput remains high at all times.
Bishop comes with a set of rules that hunt for the lowest hanging fruit, but the rule system is entirely extensible - rules are regular expressions that are run on specified directories, so if you can turn it into a regex, Bishop will look for it.
Bishop is intended SOLELY for legal use on web servers that you control or are permitted to scan, and the developers are not responsible for how you choose to use this software.
Bishop is MIT licensed and open source; contribute at https://github.com/jkingsman/bishop.
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "Bishop Vulnerability Scanner",\t"short_name": "Bishop", "version": "1.0.12", "description": "Search websites for git repos, exposed config files, and more as you browse.", "author": "Jack Kingsman ", "homepage_url": "https://github.com/jkingsman/bishop", "background": {\t\t"scripts": ["background.js"] },\t"browser_action":{ "default_title":"Bishop", "default_icon":{ "19":"img/bishop19.png", "38":"img/bishop38.png" }, "default_popup":"popup.html" }, "icons": { "16": "img/bishop16.png", "48": "img/bishop48.png", "128": "img/bishop128.png" }, "content_scripts": [{ "matches": ["*://*/*"], "js": ["content_script.js"], "run_at": "document_end" }], "options_page": "options.html", "permissions": ["storage"],\t"web_accessible_resources": [\t\t"audio/alert.mp3",\t\t"alert.css"\t]}
Read more
