ExtAnalysis – Browser Extension Analysis Framework

With ExtAnalysis you can :

  • Download & Analyze Extensions From:
    • Chrome Web Store ^(https://chrome.google.com/)
    • Firefox Addons ^(https://addons.mozilla.org/)
  • Analyze Installed Extensions of:
    • Google Chrome
    • Mozilla Firefox
    • Opera Browser (Coming Soon)
  • Upload and Scan Extensions. Supported formats:
    • .crx
    • .xpi
    • .zip

Vulnerability ^(https://www.kitploit.com/search/label/Vulnerability) scan for JavaScript files

  • Network graph of all files and URLs
  • Reconnaissance tools for extracted URLs:
    • Whois Scan
    • HTTP headers ^(https://www.kitploit.com/search/label/Headers) viewer
    • URL Source viewer
    • GEO-IP location
  • Some Fun Stuffs that include:
    • Dark Mode
    • Inbuilt chiptune player (Jam on to some classic chiptune while ExtAnalysis does the work)
  • How do I install it?
    Installing ExtAnalysis is simple! It runs on python3, so make sure python3 and python3-pip are installed and follow these steps:

    $ git clone https://github.com/Tuhinshubhra/ExtAnalysis
    $ cd ExtAnalysis
    $ pip3 install -r requirements.txt`

    For proper analysis ^(https://www.kitploit.com/search/label/Analysis) don’t forget to add your virustotal ^(https://www.kitploit.com/search/label/VirusTotal) api.

    How do I use it?
    Once the installation is done you can jump straight ahead and run ExtAnalysis by running the command: $ python3 extanalysis.py It should automatically launch ExtAnalysis in a new browser window.
    For other options check out the help menu $ python3 extanalysis.py --help

    usage: extanalysis.py [-h HOST] [-p PORT] [-v] [-u] [-q] [--help]

    optional arguments:
    -h HOST, --host HOST Host to run ExtAnalysis on. Default host is 127.0.0.1
    -p PORT, --port PORT Port to run ExtAnalysis on. Default port is 13337
    -v, --version Shows version and quits
    -u, --update Checks for update
    -q, --quiet Quiet mode shows only errors on cli!
    --help Shows this help menu and exits

    Python Modules Used:

    • flask for the webserver
    • python-whois for Whois lookup
    • maxminddb for parsing the Geo-IP database
    • requests for http headers and source code viewer

    Contribution
    You can contribute to the development of ExtAnalysis by improving some code or even reporting ^(https://www.kitploit.com/search/label/Reporting) by bugs.
    For any other queries feel free to contact me via twitter: @r3dhax0r
    Below is a list of people who contributed to the development of ExtAnalysis (only pull requests!)

    Download ExtAnalysis ^(https://github.com/Tuhinshubhra/ExtAnalysis)

    Author: Marshmallow

    Marshmallow Android is BT Ireland’s Head of Sales for Republic of Ireland domestic multi-site companies, indigenous MNCs and public sector accounts. He is responsible for the direction and control of all sales activity in the region. He has over 10 years management experience from high growth start-ups to more established businesses. He’s led teams in Ireland, India and China across various industries (ICT, On-Line Recruitment, Corporate Training and International Education).