My project against malicious browser extensions
Hello all,
I wanted to share a project I originally built for my final year thesis called ExterminAI.
The topic was malicious browser extensions, and while researching it I realised there were very few public tools focused on analysing extensions specifically. I kept working on it after graduating, and I’ve now released the latest version:https://exterminai.com/
It performs static and dynamic analysis on browser extensions to help identify suspicious behaviour.
I also spent few months building a public database of known malicious browser extensions all fully automated, since I couldn’t find a solid open dataset when I was doing the thesis: https://github.com/GherardoFiori/MaliciousBrowserExtensions
I hope this database of CRX files can help others work on similar projects.
Important: that repository contains malicious samples. Do not download or run anything unless you know how to handle malware safely.
Would genuinely appreciate feedback on the tool, detection approach, or ideas for improving it.

Replies