English
See more
Search for endpoints potentially vulnerable to Spectre.
Latest Version
Version
0.1.0
Update
August 18, 2021
Size
5.5MiB
Developer
Category
Users
188 
Rating
5 ★
Manifest Version
2
Web Store Status
Extension ID
Languages Support
Permissions
Cookies
Http://*/*
Https://*/*
Storage
See more
Http://*/*
Https://*/*
Storage
Spectroscope Extension
Spectroscope is a prototype extension for security engineers and web developers to help track down application resources which aren't protected from being embedded by other websites. Such resources can, in some cases, be exfiltrated by malicious sites making use of CPU-level information leaks on users' devices, such as the Spectre vulnerability.
The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools \"Spectroscope\" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.
Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.
Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum
Read more
The tool identifies resources which are exempt from default protections enabled in Google Chrome (Cross-Origin Read Blocking, SameSite cookies) and which can be embedded cross-site. The results are added to Chrome's DevTools \"Spectroscope\" panel and include security recommendations to help protect your resources from Spectre and other cross-site attacks.
Note: This is a prototype extension which is meant to be used only as a convenience tool to help you protect your site; it is not an official Google product. Testing your site with Spectroscope is not a substitute for careful deployment of recommended web security features. See https://w3c.github.io/webappsec-post-spectre-webdev/ for a complete list of best practices.
Authors (alphabetically): Roberto Clapis, Santiago Diaz, Aleksandr Dobkin, David Dworken, Artur Janc, Aaron Shim, Lukas Weichselbaum
Source Manifest.json
{"update_url": "https://clients2.google.com/service/update2/crx", "name": "Spectroscope", "version": "0.1.0", "description": "Search for endpoints potentially vulnerable to Spectre.", "icons": { "128": "icon128.png" }, "manifest_version": 2, "devtools_page": "devtools.html", "permissions": ["cookies", "http://*/*", "https://*/*", "storage"], "background": { "persistent":false, "scripts": ["background.js"] }}
Read more
Similar Extensions
moarTLS Analyzer 188 9 ★ 30.37KiB
Tracy 188 2 ★ 899KiB
Same Origin Method Execution - Targeting Tool 188 2 ★ 29.88KiB
Alpha Checker 188 1 ★ 4.75MiB
Hack-Tools 188 27 ★ 1.61MiB
OWASP Penetration Testing Kit 188 43 ★ 7.14MiB
Investigate with Lacework 188 0 ★ 17.45KiB
Cyber Web Tools 188 6 ★ 340KiB
Vulners Web Scanner 188 20 ★ 534KiB
Bishop Vulnerability Scanner 188 12 ★ 198KiB
CSP Evaluator 188 29 ★ 297KiB
Plugin Vulnerabilities 188 1 ★ 9.98KiB
retire.js 188 9 ★ 132KiB
Untrusted Types for DevTools 188 3 ★ 39.16KiB
Mitaka 188 15 ★ 149KiB
Sputnik 188 13 ★ 14.14KiB
WPintel - WordPress Vulnerability Scanner 188 5 ★ 153KiB
YesWeHack VDP Finder 188 2 ★ 88.31KiB
Trufflehog 188 8 ★ 34.61KiB
ThreatPinch Lookup 188 25 ★ 3.6MiB
ZoomEye Tools 188 6 ★ 583KiB
MSOS X-Frame Buster 188 2 ★ 347KiB
WPSecurity - WordPress Vulnerability Scanner 188 1 ★ 206KiB
Xframe Assassin 188 4 ★ 666KiB
User reviews
Jerry Zhang (ID: 000000640e293322) Voted 5 ★ - Updated 03/16/2021
Eduardo' Vela" Nava (ID: 0000009f3076130a) Voted 5 ★ - Updated 03/12/2021
