A passive scanning tool for finding expired domain vulnerabilites while you browse.

Latest Version

Version
0.0.2
Update
October 8, 2016
Size
695KiB
Developer
thehackerblog.com
Category
Users
78
Rating
0 ★
Manifest Version
2
Web Store Status
Languages Support
English
See more
Permissions
WebRequest
WebRequestBlocking

See more

PERS - The Passive Expired Resource Scanner Extension

A Chrome extension which detects expired domains in webpage resources (such as external images, CSS, and JavaScript) while you browse. Once detected it alerts you to the details and offers multiple ways to verify that the domain is expired. These vulnerabilities often allow for hijacking of the vulnerable webpage.

Useful for penetration testers and auditors who wish to automatically identify these vulnerabilities passively while they browse.

Reason for various permissions requested by extension:
* webRequest: Required to hook the onErrorOcurred function in Chrome to detect when a resource load has resulted in a network error occurring (e.g. \"net::ERR_NAME_NOT_RESOLVED\").
* webRequestBlocking: Required to block and add headers for certain domain availability querying APIs (e.g. add Origin header).
* : Required because we have to be able to detect failed network loads for resources from any domain/URL.
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "name": "PERS - The Passive Expired Resource Scanner", "version": "0.0.2", "manifest_version": 2, "description": "A passive scanning tool for finding expired domain vulnerabilites while you browse.", "homepage_url": "https://thehackerblog.com/", "content_security_policy": "default-src 'self' https://thehackerblog.com; style-src * https://fonts.googleapis.com; img-src *; font-src *; connect-src *;", "icons": { "16": "icons/icon16.png", "48": "icons/icon48.png", "128": "icons/icon128.png" }, "default_locale": "en", "background": { "page": "src/bg/background.html", "persistent": true }, "permissions": [ "webRequest", "webRequestBlocking", "" ]}
Read more

Similar Extensions

icon

FrustratedTech - Server Admin Tool Extension · Developer Tools 78 5 ★ 58.6KiB

icon

ScriptMix Extension · Developer Tools 78 0 ★ 283KiB

icon

Domain Hunter Plus Extension · Productivity 78 19 ★ 58.56KiB

icon

Display Access Keys Extension · Accessibility 78 3 ★ 6.56KiB

icon

Domain Check Plugin Extension · Productivity 78 4 ★ 36.63KiB

icon

Vulners Web Scanner Extension · Productivity 78 20 ★ 534KiB

icon

Cyber Web Tools Extension · Developer Tools 78 6 ★ 340KiB

icon

Domain Info Extension · Productivity 78 6 ★ 123KiB

icon

Orphaned Resources Extension · Productivity 78 0 ★ 1.6MiB

icon

Tracy Extension · Developer Tools 78 2 ★ 899KiB

icon

Opener Detector Extension · Developer Tools 78 1 ★ 29.94KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 78 12 ★ 198KiB

icon

Investigate with Lacework Extension · Productivity 78 0 ★ 17.45KiB

icon

Breakbot Extension · Developer Tools 78 5 ★ 141KiB

icon

IP, DNS & Security Tools | HackerTarget.com Extension · Developer Tools 78 31 ★ 94.76KiB

icon

Plugin Vulnerabilities Extension · Developer Tools 78 1 ★ 9.98KiB

icon

DOM-JSON Tree Matcher Extension · Developer Tools 78 0 ★ 18.58KiB

icon

Scripter debugger extension Extension · Developer Tools 78 2 ★ 1.04MiB

icon

Perceptual image analysis Extension · Productivity 78 1 ★ 78.98KiB

icon

Input hidden Monitor Extension · Developer Tools 78 0 ★ 36.05KiB

icon

Hidden Input Finder Extension · Developer Tools 78 1 ★ 245KiB

icon

RankBio - SEO & Website Analysis Extension · Productivity 78 7 ★ 91.43KiB

icon

Dev Playground Extension · Developer Tools 78 2 ★ 288KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 78 30 ★ 18.48MiB