ExtAnalysis

Features • Installation • Use • Modules Used • Screenshots • License

With ExtAnalysis you can :

• Download & Analyze Extensions From:
  • Chrome Web Store
  • Firefox Addons
• Analyze Installed Extensions of:
  • Google Chrome
  • Mozilla Firefox
  • Opera Browser (Coming Soon)
• Upload and Scan Extensions. Supported formats:
  • .crx
  • .xpi
  • .zip

Features of ExtAnalysis :

• View Basic Informations:
  • Name, Author, Description and Version
• Manifest Viewer
• In depth permission information
• Extract Intels from files which include:
  • URLs and domains
  • IPv6 and IPv4 addresses
  • Bitcoin addresses
  • Email addresses
  • File comments
  • Base64 encoded strings
• View and Edit files. Supported file types:
  • html
  • json
  • JavaScript
  • css
• VirusTotal Scans For:
  • URLs
  • Domains
  • Files
• RetireJS Vulnerability scan for JavaScript files
• Network graph of all files and URLs
• Reconnaissance tools for extracted URLs:
  • Whois Scan
  • HTTP headers viewer
  • URL Source viewer
  • GEO-IP location
• Some Fun Stuffs that include:
  • Dark Mode
  • Inbuilt chiptune player (Jam on to some classic chiptune while ExtAnalysis does the work)

How do I install it?

Installing ExtAnalysis is simple! It runs on python3, so make sure python3 and python3-pip are installed and follow these steps:

git clone https://github.com/Tuhinshubhra/ExtAnalysis

cd ExtAnalysis

pip3 install -r requirements.txt

For proper analysis don't forget to add your virustotal api.

How do I use it?

Once the installation is done you can jump straight ahead and run ExtAnalysis by running the command: $ python3 extanalysis.py It should automatically launch ExtAnalysis in a new browser window.

For other options check out the help menu $ python3 extanalysis.py --help

usage: extanalysis.py [-h HOST] [-p PORT] [-v] [-u] [-q] [--help]

optional arguments:
  -h HOST, --host HOST  Host to run ExtAnalysis on. Default host is 127.0.0.1
  -p PORT, --port PORT  Port to run ExtAnalysis on. Default port is 13337
  -v, --version         Shows version and quits
  -u, --update          Checks for update
  -q, --quiet           Quiet mode shows only errors on cli!
  --help                Shows this help menu and exits

Installing Docker Engine

Use the following link

Docker Build

docker build -t extanalysis .

Docker Usage

docker run --rm -it -p 13337:13337 extanalysis -h 0.0.0.0

Using Docker Compose

docker compose build

docker compose up

## Or just:
docker compose up --build

## To run only for one-time use
docker-compose run --rm --build -it -p 13337:13337 extanalysis -h 0.0.0.0

## To run in the background
docker compose up -d

Python Modules Used:

• flask for the webserver
• python-whois for Whois lookup
• maxminddb for parsing the Geo-IP database
• requests for http headers and source code viewer

Screenshots

Contribution

You can contribute to the development of ExtAnalysis by improving some code or even reporting by bugs.

For any other queries feel free to contact me via twitter: @r3dhax0r

Below is a list of people who contributed to the development of ExtAnalysis (only pull requests!)

Contributors

• WebBreacher
• Nilay Nath Sharan

License and Credits

ExtAnalysis is licensed under GNU General Public License v3.0. Attribution to all the third-party libraries used can be found in the CREDITS file.

Copyright (C) 2019 - 2022 Tuhinshubhra