ExtAnalysis - Browser Extension Analysis Framework - Scan, Analy

项目说明

<p align='center'>
<img src=" alt="Logo"> <br>
<a href=" src=" alt=""></a>
<img src="
<a href=" src=" alt="Python "></a>
<a href=" src=" alt="GitHub stars" /></a>
<a href=" src=" alt="GitHub license" /></a>
<a href=" src=" alt="Twitter" /></a>
</p>
<hr>
<p align='center'>
<a href="#features-of-extanalysis-">Features</a> • <a href="#how-do-i-install-it">Installation</a> • <a href="#how-do-i-use-it">Use</a> • <a href="#python-modules-used">Modules Used</a> • <a href="#screenshots">Screenshots</a> • <a href="#license-and-credits">License</a>
</p>
<hr>

With ExtAnalysis you can :

- Download & Analyze Extensions From:
- Chrome Web Store
- Firefox Addons

Analyze Installed Extensions of:

- Google Chrome
- Mozilla Firefox
- Opera Browser (Coming Soon)

Upload and Scan Extensions. Supported formats:

- .crx
- .xpi
- .zip

Features of ExtAnalysis :

View Basic Informations:

- Name, Author, Description and

Manifest

In depth permission information

Extract Intels from files which include:

- URLs and domains
- IPv6 and IPv4 addresses
- Bitcoin addresses
- Email addresses
- File comments
- Base64 encoded strings

View and Edit files. Supported file types:

- html
- json
- Ja
- css

Scans For:

- URLs
- Domains
- Files

RetireJS scan for Ja files

Network graph of all files and URLs

Reconnaissance tools for extracted URLs:

- Whois Scan
- HTTP headers
- URL Source
- GEO-IP location

Some Fun Stuffs that include:

- Dark Mode
- Inbuilt chiptune player (*Jam on to some classic chiptune while ExtAnalysis does the work*)

How do I install it?

Installing ExtAnalysis is simple! It runs on python3, so make sure python3 and python3-pip are installed and follow these steps:

For proper analysis don't forget to add your api.

How do I use it?

Once the installation is done you can jump straight ahead and run ExtAnalysis by running the command:
$ python3 extanalysis.py
It should automatically launch ExtAnalysis in a new browser window.

For other options check out the help menu $ python3 extanalysis.py --help

Installing Docker Engine

Use the following link

Docker Build

Docker Usage

Using Docker Compose

Python Modules Used:

- flask for the webserver
- python-whois for Whois lookup
- maxminddb for parsing the Geo-IP database
- requests for http headers and source code

Screenshots

<p align="center">
<img alt="Main Menu" src=" />
<!-- img alt="Results" src=" /> -->
<img alt="Results" src=" />
</p>

Contribution

You can contribute to the de of ExtAnalysis by improving some code or e by bugs.

For any other queries feel free to contact me :

Below is a list of people who contributed to the de of ExtAnalysis (*only pull requests!*)
#### Contributors

WebBreacher

Nilay Nath Sharan

License and Credits

ExtAnalysis is licensed under GNU General Public License v3.0.
Attribution to all the third-party libraries used can be found in the CREDITS file.

<br>
<h4 align="center">Copyright (C) 2019 - 2022 Tuhinshubhra</h4>

项目信息

开发语言：Python

Star 数：757

技术要点

该项目属于漏洞知识库方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Browser Extension Analysis Framework - Scan, Analyze Chrome, firefox and Brave extensions for vulnerabilities and intels展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。