Rapid7 AppSec Plugin

Latest Version

Version
4.6.8
Update
May 1, 2024
Size
23.55MiB
Developer
Category
Users
9,000+
Rating
3.66667 ★
Manifest Version
3
Web Store Status
Languages Support
English (United States)
See more
Permissions
ActiveTab
Cookies
Notifications
Tabs
Storage
Background
Debugger
Scripting
WebRequest
See more

Rapid7 AppSec Plugin Extension

The Rapid7 AppSec plugin works with Rapid7 InsightAppSec and AppSpider dynamic application security testing solutions to improve application scanning coverage and assist in validating vulnerabilities with these capabilities:

Macro Recording - Use the plugin to record macros required by InsightAppSec and AppSpider Enterprise when selecting the Macro Authentication scan configuration. Macro Authentication enables the crawling engine of InsightAppSec and AppSpider to authenticate with complex login workflows.

Vulnerability Validator - Use the vulnerability validator in conjunction with the Attack Replay feature in InsightAppSec and AppSpider. This feature of the Chrome plugin enables users to replay and edit recorded traffic generated during an InsightAppSec or AppSpider scan.

Bootstrap Authentication - The Chrome plugin is required to use AppSpider Enterprise's Bootstrap Authentication feature, which gives the user the ability to interactively login to the target application during an active scan. Used for login workflows that require human interaction for example 2FA (Two-factor authentication).

Traffic Recorder - Record the interactions (like HTTP GET and POST requests) between the front end application and the back end server in a Traffic File. InsightAppSec can replay these interactions to authenticate into your application.

For support related to this plugin, please contact [email protected]
Read more

Source Manifest.json

{"update_url": "https://clients2.google.com/service/update2/crx", "author": "Rapid7", "name": "Rapid7 AppSec Plugin", "short_name": "R7 Plugin", "description": "Rapid7 AppSec Plugin", "version": "4.6.8", "manifest_version": 3, "incognito": "split", "background": { "service_worker": "app.js", "type": "module" }, "content_scripts": [ { "matches": [""], "js": [ "./packages/browser-polyfill/browser-polyfill.min.js" ], "all_frames": true, "run_at": "document_end" } ], "permissions": [ "activeTab", "cookies", "notifications", "tabs", "storage", "background", "debugger", "scripting", "webRequest" ], "host_permissions": [ "*://*/*", "file://*/*", "http://*/*", "https://*/*" ], "icons": { "128": "browser/images/icon.png" }, "action": { "default_icon": { "128": "browser/images/icon.png" }, "default_title": "Rapid7 AppSec Extension", "default_popup": "browser/index.html" }, "web_accessible_resources": [{ "resources": [ "packages/*.js", "packages/*.map", "packages/*.png", "dictionary/*.json", "hooks/*.json", "patterns/*.json", "contentScript.js", "injected.min.js", "alf-bundle.min.js", "packages/alf/app.js", "packages/alf/images/*", "packages/alf/notification.js", "packages/alf/notification.css", "appScript.js", "dragDropScript.js" ], "matches": [""] }]}
Read more

How to download and manually install Rapid7 AppSec Plugin extension for Chrome

Looking for a way to install Rapid7 AppSec Plugin extensions for Chrome, you can search for them in the Chrome Web Store, clicking the "Add to Chrome" button, and following the straightforward process.

However, you may need to install Rapid7 AppSec Plugin extensions manually, this article outlines two simple methods to effortlessly install Rapid7 AppSec Plugin extensions, whether they come as unpacked folders in compressed formats like .zip or as .crx files.

Method 1: Download Rapid7 AppSec Plugin extension and manually install through Drag &Drop

If you ever need to manually install a Rapid7 AppSec Plugin extension for Chrome, don't worry, it's a simple process. Just follow these easy steps, and you will have your extension ready to use in no time.

Step 1: Download the Rapid7 AppSec Plugin Extension by clicking the "Download CRX" button on the website.

Look for the Rapid7 AppSec Plugin extension you wish to install. Go to the website and download the Rapid7 AppSec Plugin extension package, which is usually a .CRX file and comes in a zipped file. Here ".crx" file is the format for Rapid7 AppSec Plugin extension that contains all the data.

Step 2: Extract &Arrange Files

Once the file is downloaded, extract that file into its own folder. Similarly, give that extension files a permanent home. In other words, keep it in a folder that you don't accidentally delete it because these files will be needed to make that extension work.

Step 3: Go to the Chrome Extensions Page

Open Google Chrome and in the address bar, type chrome://extensions; it will open the Google Chrome extensions page. Make sure that "My extensions" is selected in the sidebar.

Step 4: Drag and Drop the Extension

Now, go to the folder where you extracted the Rapid7 AppSec Plugin extension and drag &drop the extension file from there anywhere onto the extension page within Google Chrome.

Step 5: Complete the Installation

Once you drag and drop the extension file, follow the steps that Google Chrome takes you through. Similarly, if the extension file is of .crx file format, you will be required to review the permissions and then add the extension.

Now, you can manage that added extension as you would like to with any other Chrome extension that you added through Chrome Webstore. Its icon will also appear in the Google Chrome Menu on the right side of the address bar once you activate it.

Method 2: Download Rapid7 AppSec Plugin extension for Chrome and install in Developer Mode

This is another method to install Rapid7 AppSec Plugin extension manually, but the twist is that here, you install by enabling the developer mode option provided in Google Chrome. This mode is commonly used for testing extensions or running unpublished tools.

Step 1: Download the Rapid7 AppSec Plugin extension file

Select and download the Rapid7 AppSec Plugin extension by clicking the 'Download CRX' button on the website.

Step 2: Extract the downloaded contents

Convert the file to a ZIP file if it is in CRX format then extract the Rapid7 AppSec Plugin extension zip file or folder that you downloaded. Make sure you extract it using the same folder name and keep it safely in another folder, so you don't delete it by mistake. The extracted folder will be needed to keep your Rapid7 AppSec Plugin extension running.

Step 3: Open Chrome Extension Setting Page

In the address bar of Google Chrome, type chrome://extensions and open the Chrome Extension Page.

Step 4: Enable Developer Mode

After opening the Chrome Extension page, look at the top right side, and you will find the toggle option of "Developer mode."Simply enable that developer mode option.

Step 5: Load the Unpacked Extension

Once you enable the developer mode option, you will see the menu of Load Unpacked, Pack Extensions and Update. From that, select the option "Load unpacked."

Step 6: Select the Extension Folder

Once the pop-up opens upon clicking Load unpacked, select the Rapid7 AppSec Plugin extension directory and click on the "Select Folder "button.

Step 7: Confirm and Install

After you select an extension folder of a Google Chrome extension you're installing manually, confirm its installation for the final time and let the installation complete.

Conclusion

Here we've made a step-by-step guide on How to manually install Rapid7 AppSec Plugin extension in 2 ways. We hope this guide proves helpful.

Similar Extensions

icon

Shodan Extension · Productivity 9,000+ 136 ★ 27.6KiB

icon

OWASP Penetration Testing Kit Extension · Developer Tools 9,000+ 43 ★ 7.14MiB

icon

Qualys Browser Recorder Extension · Developer Tools 9,000+ 8 ★ 1.14MiB

icon

Burp Suite Navigation Recorder Extension · Developer Tools 9,000+ 3 ★ 279KiB

icon

retire.js Extension · Developer Tools 9,000+ 9 ★ 132KiB

icon

Recorded Future Extension · Productivity 9,000+ 20 ★ 667KiB

icon

Tenable.io Web Application Scanning Extension · Developer Tools 9,000+ 3 ★ 7.2MiB

icon

Cyber Web Tools Extension · Developer Tools 9,000+ 6 ★ 340KiB

icon

IP, DNS & Security Tools | HackerTarget.com Extension · Developer Tools 9,000+ 31 ★ 94.76KiB

icon

Pulsedive Threat Intelligence Extension · Productivity 9,000+ 30 ★ 18.48MiB

icon

HackBar Extension · Developer Tools 9,000+ 52 ★ 1.56MiB

icon

Vulners Web Scanner Extension · Productivity 9,000+ 20 ★ 534KiB

icon

Bishop Vulnerability Scanner Extension · Developer Tools 9,000+ 12 ★ 198KiB

icon

Tracy Extension · Developer Tools 9,000+ 2 ★ 899KiB

icon

Plugin Vulnerabilities Extension · Developer Tools 9,000+ 1 ★ 9.98KiB

icon

Breakbot Extension · Developer Tools 9,000+ 5 ★ 141KiB

icon

Hack-Tools Extension · Developer Tools 9,000+ 27 ★ 1.61MiB

icon

Hackers toolkit Extension · Developer Tools 9,000+ 25 ★ 211KiB

icon

SAML-tracer Extension · Developer Tools 9,000+ 30 ★ 99.9KiB

icon

CrowdScrape Extension · Developer Tools 9,000+ 10 ★ 707KiB

icon

Sputnik Extension · Productivity 9,000+ 13 ★ 14.14KiB

icon

ThreatPinch Lookup Extension · Productivity 9,000+ 25 ★ 3.6MiB

icon

d3coder Extension · Developer Tools 9,000+ 37 ★ 108KiB

icon

ZoomEye Tools Extension · Developer Tools 9,000+ 6 ★ 583KiB

User reviews

icon

Rahul Kumar (ID: 0000004e943bae78) Voted 1 ★ - Updated 04/26/2022 Not able to execute it on the configured URL, throwing msg?.startsWith error.

icon

Brian Loo (ID: 0000009bd261a9c2) Voted 5 ★ - Updated 04/09/2018 helps me validate findings, create login macros, bootstrap logins.

icon

Orlando Barrera II (ID: 00000088293a9254) Voted 5 ★ - Updated 03/10/2017 Very useful extension for AppSpider Enterprise. In order to enable these features in AppSpider Enterprise you need to modify NTOE.config file and change line to