Infostealer-Extension - 🔴 Chrome extension for authorized red team exercis

项目说明

🔴 Red Team Extension - Ad APT Simulation

![License: MIT]()
![Chrome Extension]()
![Red Team]()

> ⚠️ WARNING: This extension is designed for authorized red team exercises and security testing only. Use only in isolated lab en with proper authorization.

📋 O

This Chrome extension simulates ad persistent threat (APT) behavior for red team exercises and authorized security testing. It demonstrates common information stealing techniques used by malicious actors to help security professionals understand attack and impro measures.

🎯 Features

🛠️ Installation

Prerequisites

Setup Instructions

1. Clone the repository

2. Configure exfiltration endpoints (Edit background.js)

3. Load the extension in Chrome
- Open Chrome and na to chrome://extensions/
- Enable "De mode" in the top right
- Click "Load unpacked" and select the project directory

🔧 Configuration

Exfiltration Endpoints

The extension supports three data exfiltration methods:

####
1. Create a
2. Get your bot token and chat ID
3. Update the constants in background.js

#### Discord Webhook
1. Create a Discord webhook in your ser
2. Copy the webhook URL
3. Update the DISCORD_WEBHOOK_URL constant

#### Google Forms
1. Create a Google Form
2. Get the form submission URL from the form's action attribute
3. Update the GOOGLE_FORM_URL and FORM_COOKIE_FIELD constants

📊 Data Collected

| Data Type | Description | Sample Output |
|-----------|-------------|---------------|
| Device Fingerprint | Browser and system information | User agent, timezone, platform |
| Cookies | Stored authentication cookies | Domain, name, value, security flags |
| Browser History | Recent browsing activity | URLs with timestamps |
| Open Tabs | Current tab information | Titles and URLs |
| Clipboard | Clipboard content | Text data |

🎭 Red Team Use Cases

🛡️ Security Considerations

For Red Team Operators

For Defenders

📝 Permissions Explained

| Permission | Purpose | Risk Level |
|------------|---------|------------|
| cookies | Access stored cookies | High |
| history | Read browser history | Medium |
| tabs | Access tab information | Medium |
| clipboardRead | Read clipboard content | High |
| storage | Store extension data | Low |
| <all_urls> | Access all websites | Critical |

🚨 Detection Indicators

Beha Indicators

Network Indicators

📚 Educational Value

This extension serves as a learning tool for:

⚖️ Legal Disclaimer

IMPORTANT: This software is provided for educational and authorized testing purposes only. Users are responsible for:

The authors are not responsible for any misuse of this software.

🤝 Contributing

Contributions are welcome for educational and security research purposes:

1. Fork the repository
2. Create a feature branch
3. Make your changes
4. Submit a pull request

📄 License

This project is licensed under the MIT License - see the LICENSE file for details.

🔗 Resources

📞 Contact

For questions about authorized use or security research:

---

Remember: With great power comes great responsibility. Use this tool ethically and legally! 🛡️

项目信息

开发语言：JavaScript

Star 数：7

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕🔴 Chrome extension for authorized red team exercises and APT simulation. Demonstrates info-stealing techniques for security training and defensive testing. ⚠️ Use only in isolated lab environments with proper authorization.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。