Search for endpoints potentially vulnerable to Spectre.

Latest Version

Version
0.1.0
Update
August 18, 2021
Size
5.5MiB
Developer
Category
Users
188
Rating
5 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
Cookies
Http://*/*
Https://*/*
Storage
See more

Spectroscope Extension

Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.

The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools \"Spectroscope\" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.

Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.

Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Spectroscope", "version": "0.1.0", "description": "Search for endpoints potentially vulnerable to Spectre.", "icons": { "128": "icon128.png" }, "manifest_version": 2, "devtools_page": "devtools.html", "permissions": ["cookies", "http://*/*", "https://*/*", "storage"], "background": { "persistent":false, "scripts": ["background.js"] }}
Read more

How to download and manually install Spectroscope extension for Chrome

Looking for a way to install Spectroscope extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Spectroscope extensions manually, this article outlines two simple methods to effortlessly install Spectroscope extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Spectroscope extension and manually install through Drag &Drop

If you ever need to manually install a Spectroscope extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Spectroscope Extension by clicking the "Download CRX" button on the website.

Look for the Spectroscope extension you wish to install. Go to the website and download the Spectroscope extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Spectroscope extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Spectroscope extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Spectroscope extension for Chrome and install in Developer Mode

This is another method to install Spectroscope extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Spectroscope extension file

Select and download the Spectroscope extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Spectroscope extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Spectroscope extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Spectroscope extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Spectroscope extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

moarTLS Analyzer Extension · Developer Tools 188 9 ★ 30.37KiB

icon

Tracy Extension · Developer Tools 188 2 ★ 899KiB

icon

Same Origin Method Execution - Targeting Tool Extension · Developer Tools 188 2 ★ 29.88KiB

icon

Alpha Checker Extension · Developer Tools 188 1 ★ 4.75MiB

icon

Hack-Tools Extension · Developer Tools 188 27 ★ 1.61MiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 188 43 ★ 7.14MiB

icon

Investigate with Lacework Extension · Productivity 188 0 ★ 17.45KiB

icon

Cyber Web Tools Extension · Developer Tools 188 6 ★ 340KiB

icon

Vulners Web Scanner Extension · Productivity 188 20 ★ 534KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 188 12 ★ 198KiB

icon

CSP Evaluator Extension · Developer Tools 188 29 ★ 297KiB

icon

Plugin Vulnerabilities Extension · Developer Tools 188 1 ★ 9.98KiB

icon

retire.js Extension · Developer Tools 188 9 ★ 132KiB

icon

Untrusted Types for DevTools Extension · Developer Tools 188 3 ★ 39.16KiB

icon

Mitaka Extension · Developer Tools 188 15 ★ 149KiB

icon

Sputnik Extension · Productivity 188 13 ★ 14.14KiB

icon

WPintel - WordPress Vulnerability Scanner Extension · Developer Tools 188 5 ★ 153KiB

icon

YesWeHack VDP Finder Extension · Productivity 188 2 ★ 88.31KiB

icon

Trufflehog Extension · Developer Tools 188 8 ★ 34.61KiB

icon

ThreatPinch Lookup Extension · Productivity 188 25 ★ 3.6MiB

icon

ZoomEye Tools Extension · Developer Tools 188 6 ★ 583KiB

icon

MSOS X-Frame Buster Extension · Developer Tools 188 2 ★ 347KiB

icon

WPSecurity - WordPress Vulnerability Scanner Extension · Developer Tools 188 1 ★ 206KiB

icon

Xframe Assassin Extension · Productivity 188 4 ★ 666KiB

User reviews

icon

Jerry Zhang (ID: 000000640e293322) Voted 5 ★ - Updated 03/16/2021 I was finally able to find the ghost in the machine using this extension.

icon

Eduardo' Vela" Nava (ID: 0000009f3076130a) Voted 5 ★ - Updated 03/12/2021 I used to not believe in ghosts. But after using this extension, I feel like I see dead people!