meetpaladin.com

Protection against log4j websocket attacks by disabling websockets to localhost and private IPs.

Latest Version

Version

1.0.0

Update

December 22, 2021

Size

62.68KiB

Developer

meetpaladin.com

Paladin Log4j Immunizer Extension

Browser extension to prevent Log4J exploits via WebSocket against services running on private network and localhost. This extension will disable connections over WebSocket to localhost and private IP addresses unless the initiator is also localhost or a private IP. This should harden your browser against drive-by websites, phishing landing pages, malicious HTML attachments and malicious ads that seek to use your browser as a beachhead for launching Log4J exploits against your company's internal web applications.

License: GPLv3
Source: https://github.com/paladincyber/log4jprotector

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Paladin Log4j Immunizer", "description": "Protection against log4j websocket attacks by disabling websockets to localhost and private IPs.", "version": "1.0.0", "manifest_version": 2, "author": "Paladin Cyber", "background": { "scripts": ["build/tsc/bundle.js"] }, "permissions": [ "\\u003Call_urls>", "webRequest", "webRequestBlocking" ], "browser_action": { "default_icon": { "16": "images/logo16.png", "32": "images/logo32.png", "48": "images/logo48.png", "128": "images/logo128.png" }, "default_title": "Stopping websocket connections against localhost and private IPs." }, "icons": { "16": "images/browser-signedin16.png", "32": "images/browser-signedin32.png", "48": "images/browser-signedin48.png", "128": "images/browser-signedin128.png" }}

Download CRX(62.68KiB)