Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.

Latest Version

Version
1.1
Update
March 29, 2022
Size
24.22KiB
Developer
security.lauritz-holtmann.de
Category
Users
188
Rating
1 ★
Manifest Version
3
Web Store Status
Languages Support
English
See more
Permissions
Tabs
Storage
History
See more

AuRA - Auth. Request Analyser Extension

This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.

Features:
• View request parameters at a glance, either via the popup or the developer tools panel.
• Hover over standardised parameters for background information about parameters.
• Manually modify request parameters.
• Detailed Analysis of request parameters:
• Observations: Informational findings within the Auth. Request.
• Recommendations: Hardening measures directly identified within the current Auth. Request.
• Attacks: Proposed further test cases, can be automatically executed with one click.
• Search history for Auth. Request and replay the request.
• Indicate with a badge if the currently visited page appears to be an Auth. Request.
• Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect.
• Manually trigger analysis.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "AuRA - Auth. Request Analyser", "version": "1.1", "action": { "default_popup": "application.html" }, "devtools_page": "devtools.html", "background": { "service_worker": "background.js" }, "permissions": [ "tabs","storage","history" ], "description" : "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.", "icons" : { "128":"aura_logo_favicon.png" }}
Read more

How to download and manually install AuRA - Auth. Request Analyser extension for Chrome

Looking for a way to install AuRA - Auth. Request Analyser extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install AuRA - Auth. Request Analyser extensions manually, this article outlines two simple methods to effortlessly install AuRA - Auth. Request Analyser extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download AuRA - Auth. Request Analyser extension and manually install through Drag &Drop

If you ever need to manually install a AuRA - Auth. Request Analyser extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the AuRA - Auth. Request Analyser Extension by clicking the "Download CRX" button on the website.

Look for the AuRA - Auth. Request Analyser extension you wish to install. Go to the website and download the AuRA - Auth. Request Analyser extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for AuRA - Auth. Request Analyser extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the AuRA - Auth. Request Analyser extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download AuRA - Auth. Request Analyser extension for Chrome and install in Developer Mode

This is another method to install AuRA - Auth. Request Analyser extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the AuRA - Auth. Request Analyser extension file

Select and download the AuRA - Auth. Request Analyser extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the AuRA - Auth. Request Analyser extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your AuRA - Auth. Request Analyser extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the AuRA - Auth. Request Analyser extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install AuRA - Auth. Request Analyser extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

SAML-tracer Extension · Developer Tools 188 30 ★ 99.9KiB

icon

SAML DevTools extension Extension · Developer Tools 188 29 ★ 7.85MiB

icon

SAML, WS-Federation and OAuth 2.0 tracer Extension · Developer Tools 188 8 ★ 128KiB

icon

retire.js Extension · Developer Tools 188 9 ★ 132KiB

icon

Aura Tab Extension · Productivity 188 0 ★ 7.62MiB

icon

Azure AD App Launcher Extension · Developer Tools 188 1 ★ 46.14KiB

icon

SAML Message Decoder Extension · Developer Tools 188 32 ★ 450KiB

icon

SAML Chrome Panel Extension · Developer Tools 188 54 ★ 183KiB

icon

Untrusted Types for DevTools Extension · Developer Tools 188 3 ★ 39.16KiB

icon

OpenID Extension · Productivity 188 0 ★ 130KiB

icon

OAuth Flows Extension · Developer Tools 188 9 ★ 42.71KiB

icon

Simple OAuth2 Client Extension · Developer Tools 188 0 ★ 63.87KiB

icon

JWT Extension · Developer Tools 188 0 ★ 14.86KiB

icon

Trufflehog Extension · Developer Tools 188 8 ★ 34.61KiB

icon

AutoJWT Extension · Developer Tools 188 0 ★ 619KiB

icon

JWT Inspector Extension · Developer Tools 188 6 ★ 20.19KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 188 43 ★ 7.14MiB

icon

DotGit Extension · Developer Tools 188 12 ★ 147KiB

icon

HTTP-TRACKER Extension · Developer Tools 188 33 ★ 85.4KiB

icon

Tracy Extension · Developer Tools 188 2 ★ 899KiB

icon

Keycloak bearer token getter Extension · Developer Tools 188 2 ★ 119KiB

icon

WPintel - WordPress Vulnerability Scanner Extension · Developer Tools 188 5 ★ 153KiB

icon

JWT Decoder Extension · Developer Tools 188 2 ★ 31.42KiB

icon

DOMLogger++ Extension · Developer Tools 188 4 ★ 652KiB