AuRA - Auth. Request Analyser Extension Chrome

Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.

Latest Version

Version

1.1

Update

March 29, 2022

Size

24.22KiB

Developer

security.lauritz-holtmann.de

AuRA - Auth. Request Analyser Extension

This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.

Features:
• View request parameters at a glance, either via the popup or the developer tools panel.
• Hover over standardised parameters for background information about parameters.
• Manually modify request parameters.
• Detailed Analysis of request parameters:
• Observations: Informational findings within the Auth. Request.
• Recommendations: Hardening measures directly identified within the current Auth. Request.
• Attacks: Proposed further test cases, can be automatically executed with one click.
• Search history for Auth. Request and replay the request.
• Indicate with a badge if the currently visited page appears to be an Auth. Request.
• Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect.
• Manually trigger analysis.

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 3, "name": "AuRA - Auth. Request Analyser", "version": "1.1", "action": { "default_popup": "application.html" }, "devtools_page": "devtools.html", "background": { "service_worker": "background.js" }, "permissions": [ "tabs","storage","history" ], "description" : "Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.", "icons" : { "128":"aura_logo_favicon.png" }}