Buio

My project against malicious browser extensions

by

Hello all,

I wanted to share a project I originally built for my final year thesis called ExterminAI.

The topic was malicious browser extensions, and while researching it I realised there were very few public tools focused on analysing extensions specifically. I kept working on it after graduating, and I’ve now released the latest version:https://exterminai.com/

It performs static and dynamic analysis on browser extensions to help identify suspicious behaviour.

I also spent few months building a public database of known malicious browser extensions all fully automated, since I couldn’t find a solid open dataset when I was doing the thesis: https://github.com/GherardoFiori/MaliciousBrowserExtensions

I hope this database of CRX files can help others work on similar projects.

Important: that repository contains malicious samples. Do not download or run anything unless you know how to handle malware safely.

Would genuinely appreciate feedback on the tool, detection approach, or ideas for improving it. The launch is scheduled on here for tonight :)

24 views

Add a comment

Replies

Best
Rian Robertson

Neat project! Love the focus on browser extension security...super relevant. I'm building The Sponge, an AI-powered flashcard app with a browser extension that turns webpages into study material. Will check out ExterminAI to scan mine. If you're up for it, I'm launching on PH soon...would appreciate a follow (See "PRODUCT HUNT LAUNCH" Link in my profile)