infotxt Extension Chrome

Notifies if securitytxt is present for the site you are visiting, pulls the information down, to facilitate reporting information.

Latest Version

Version

1.0

Update

February 28, 2019

Size

23.69KiB

Developer

infotxt Extension

Infotxt aides in responsible disclosure and will make it easier for you to contact cyber-security departments for the sites you are browsing. Adding infotxt to Chrome means that it will check the /.well-known/ directory for a security.txt file. If it is present, clicking on the extensions icon will present the information needed to directly contact and report security issues to that company. Security Researchers and Ethical Hackers will greatly benefit from the ease of use and user experience that this extension presents.

Securitytxt is a proposed standard which allows websites to define security policies. The security.txt file sets clear guidelines for security researchers on how to report security issues, and allows bug bounty programs to define a scope. Security.txt is the equivalent of robots.txt, but for security issues. This standard has begun industry-wide adoption by companies such as Facebook and Google. The Internet draft for security.txt can be found here: https://tools.ietf.org/html/draft-foudil-securitytxt.

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "manifest_version": 2, "name": "infotxt", "short_name": "infotxt", "description": "Notifies if securitytxt is present for the site you are visiting, pulls the information down, to facilitate reporting information.", "version": "1.0", "author": "Favian Eric Raygoza", "browser_action": { "default_icon" : "absent.png", "default_title": "securitytxt not found" }, "icons": { "16": "absent.png", "32": "absent.png", "48": "absent.png", "128": "icon128.png" }, "permissions": ["activeTab"], "content_scripts": [ { "matches": [""], "run_at": "document_end", "js": ["content.js"] } ], "background": { "scripts": ["background.js"], "persistent": false } }