locating Chrome extension files for fingerprinting
Date: July 01, 2011 06:55PM
Anyone know an easy way of obtaining a Chrome Extension file (.crx) without using Chrome?
I plan to parse the manifest.json of the top ~1000 Chrome extension for a bruteforce addon scanner like the one I just made for firefox (which only detects 10% of the top 1000) http://skeletonscribe.blogspot.com/2011/07/sparse-bruteforce-addon-scanner.html
It was pretty easy to automate downloading extensions from addons.mozilla.org but the Chrome webstore is too complicated for me so I can't see the URI where the actual .crx file is. I tried using burp proxy to intercept requests but Chrome appears to be hard-coded not to accept imported root CAs for chrome.google.com
edit:got it; https://clients2.google.com/service/update2/crx?response=redirect&x=id%3D<theaddonid>%26lang%3Den-GB%26uc
Edited 1 time(s). Last edit at 07/02/2011 09:56AM by Albino.