kezzyhko kezzyhko

Evaluate the Risk of Browser Extension Before Installing It by Reading the Source Code

This post is written for Manifest v2, Manifest v3 is not yet released at the moment.

Ok, kids, today we are going to scrutinize a source code of a browser extension to speculate about its risks.
First, you will need to know how to download or view browser extension source codes:

Extension for Chromium/Chrome: https://chrome.google.com/webstore/detail/chrome-extension-source-v/jifpbeccnghkjeaalbbjmodiffmgedin
Right Click for FireFox: https://superuser.com/questions/771825/how-to-examine-source-code-of-firefox-extension-before-installing-it

See also:

Service	Type	Storage	Limitations
Amazon DynamoDB	⚠️ Proprietary NoSQL	25 GB	⚠️ Payment method required
Amazon RDS	⚠️ Proprietary RDBMS		⚠️ Only free for 1 year
Azure SQL Database	MS SQL Server		⚠️ Only free for 1 year
👉 Clever Cloud	PostgreSQL, MySQL, MongoDB, Redis	256 MB (PostgreSQL)	Max 5 connections (PostgreSQL)

More info can be found at, https://docs.microsoft.com/en-us/dotnet/api/system.environment.specialfolder?view=netframework-4.7.2

Code example

// C:\ProgramData\
var path1 = System.Environment.GetFolderPath(System.Environment.SpecialFolder.CommonApplicationData);

// C:\Users\USERNAME\AppData\Roaming
var path2 = System.Environment.GetFolderPath(System.Environment.SpecialFolder.ApplicationData);

How to Build a Cuckoo Sandbox Malware Analysis System

I had a heck of a time getting a Cuckoo sandbox running, and below I hope to help you get one up and running relatively quickly by detailing out the steps and gotchas I stumbled across along the way. I mention this in the references at the end of this gist, but what you see here is heavily influenced by this article from Nviso

Build your Linux Cuckoo VM

Setup a Ubuntu 16.04 64-bit desktop VM (download here) in VMWare with the following properties:

100GB hard drive
2 procs
8 gigs of RAM

	@echo off
	:: Note: Lines beginning with "REM" or :: are comments
	:: Script by: https://github.com/thiojoe
	:: Purpose: Creates a much more user friendly output for the Microsoft Error Lookup Tool (err.exe). It parses the original output and modifies the text.
	:: Usage: Just call the batch file with command prompt along with the error code the same as you would with err.exe
	:: Example: error.bat 50
	:: Recommended to rename this script to something shorter like 'error.bat'. Must be next to the lookup tool exe file.

	import java.util.*;

	public class AdditionUnderXOR {

	static final int SS = 1000000;

	enum Ore {

	COAL(60005),
	IRON(60006),

	using System;
	using UnityEditor;
	using UnityEngine;

	namespace Tools
	{
	/// <summary>
	/// Add this attribute to a float property to make it a logarithmic range slider
	/// </summary>
	[AttributeUsage(AttributeTargets.Field \| AttributeTargets.Property)]

	/*******************************************************************************
	* Don't Be a Jerk: The Open Source Software License.
	* Adapted from: https://github.com/evantahler/Dont-be-a-Jerk
	*******************************************************************************
	* _I_ am the software author - JohannesMP on Github.
	* _You_ are the user of this software. You might be a _we_, and that's OK!
	*
	* This is free, open source software. I will never charge you to use,
	* license, or obtain this software. Doing so would make me a jerk.
	*