Comments on post “CRX Extractor”
H
Vladimir Ignatev
@v_ignatyev · I believe in tech and people.
The purpose of this tool is not just to help people learn how to hack and build any extension. I want to increase awareness about Chrome Extensions security in general, providing an easy tool which everyone can use as a good start of analyzing any popular extension.
I'm hear from you, community of the ProductHunt, how can CRXExtractor and we all together can solve these problems and make CRXExctractor more valuable to end users, who want to learn from others' code, build own great and rich Chrome Extensions, hack into ones created by others.
Any feedback about this tool features, usability and content on the original site is much appreciated!
2sharetweet・
Vinay Hiremath
@vhmth · Founder & Head of Engineering @ Loom
@v_ignatyev if security is your concern, it may be more useful to create a tool that grabs the source code and does some lexical analysis on it to generate security and compatibility reports. That would be killer for both the users of the extensions as well as the authors.
1sharetweet・
Vinay Hiremath
@vhmth · Founder & Head of Engineering @ Loom
@v_ignatyev worth noting that Chrome has a pretty rich permissions scheme in their manifest file as well. So you see exactly what the extension is going to do when you're installing it (what powers it has).
1sharetweet・
H
Vladimir Ignatev
@v_ignatyev · I believe in tech and people.
@vhmth I thought about it, but I haven't got enough samples of malware code. Thanks for sharing the great idea!
upvotesharetweet・