Cenzic 232 Patent
Paid Advertising
sla.ckers.org is
ha.ckers sla.cking
Sla.ckers.org
Whether this is about ha.ckers.org, sla.ckers.org or some other project you are interested in or want to talk about, throw it in here to get feedback. 
Go to Topic: PreviousNext
Go to: Forum ListMessage ListNew TopicSearchLog In
locating Chrome extension files for fingerprinting
Posted by: Albino
Date: July 01, 2011 06:55PM

Anyone know an easy way of obtaining a Chrome Extension file (.crx) without using Chrome?

I plan to parse the manifest.json of the top ~1000 Chrome extension for a bruteforce addon scanner like the one I just made for firefox (which only detects 10% of the top 1000) http://skeletonscribe.blogspot.com/2011/07/sparse-bruteforce-addon-scanner.html
It was pretty easy to automate downloading extensions from addons.mozilla.org but the Chrome webstore is too complicated for me so I can't see the URI where the actual .crx file is. I tried using burp proxy to intercept requests but Chrome appears to be hard-coded not to accept imported root CAs for chrome.google.com

edit:got it; https://clients2.google.com/service/update2/crx?response=redirect&x=id%3D<theaddonid>%26lang%3Den-GB%26uc



Edited 1 time(s). Last edit at 07/02/2011 09:56AM by Albino.

Options: ReplyQuote


Sorry, only registered users may post in this forum.