A Python crawler for extensions from the Chrome Web Store.
Go to file
Achim D. Brucker 5783eb8f27 Optimized image size. 2018-07-28 10:46:24 +01:00
ExtensionCrawler Fixed small bug. 2018-07-27 16:39:42 +02:00
bench Added md5 db benchmark. 2018-07-12 13:35:09 +01:00
queries Deleted simhash queries. 2018-07-13 00:43:06 +01:00
resources Updated regexps. 2017-09-01 22:26:30 +01:00
scripts Removed -m options not supported by ts on our server. 2018-06-19 20:12:20 +01:00
sge Ignore GPU nodes, use less RAM. 2018-07-26 18:38:11 +02:00
singularity Optimized image size. 2018-07-28 10:46:24 +01:00
.gitignore Updated image name(s). 2017-09-26 08:56:00 +01:00
LICENSE initial commit 2016-09-08 20:43:35 +02:00
README.md Added SPDX identifier. 2018-07-21 12:13:54 +01:00
cdnjs-git-miner Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
comparemd5 Changed way of parallelism for simhashbucket and added comparemd5. 2018-07-10 20:47:07 +01:00
crawler Use 16 threads to discover new extensions. 2018-07-15 19:19:26 +01:00
create-db Bundle mysql inserts. 2018-07-19 23:26:25 +01:00
crx-extract Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
crx-jsinventory Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
crx-jsstrings Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
crx-tool Made python 3.6 the default. 2017-11-02 18:46:20 +00:00
extfind Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
extfind.py Updated grepper. 2017-09-27 14:05:16 +01:00
requirements.txt Fix some encoding issues. 2018-07-21 01:50:59 +01:00
setup.py Fixed style errors and warnings. 2018-04-21 19:00:07 +01:00
simhashbucket Changed way of parallelism for simhashbucket and added comparemd5. 2018-07-10 20:47:07 +01:00

README.md

ExtensionCrawler

A collection of utilities for downloading and analyzing browser extension from the Chrome Web store.

  • crawler: A crawler for extensions from the Chrome Web Store.
  • crx-tool: A tool for analyzing and extracting *.crx files (i.e., Chrome extensions). Calling crx-tool.py <extension>.crx will check the integrity of the extension.
  • crx-extract: A simple tool for extracting *.crx files from the tar-based archive hierarchy.
  • crx-jsinventory: Build a JavaScript inventory of a *.crx file using a JavaScript decomposition analysis.
  • crx-jsstrings: A tool for extracting code blocks, comment blocks, and string literals from JavaScript.
  • create-db: A tool for updating a remote MariaDB from already existing extension archives.

The utilities store the extensions in the following directory hierarchy:

   archive
   ├── conf
   │   └── forums.conf
   ├── data
   │   └── ...
   └── log
       └── ...

The crawler downloads the most recent extension (i.e., the *.crx file as well as the overview page. In addition, the conf directory may contain one file, called forums.conf that lists the ids of extensions for which the forums and support pages should be downloaded as well. The data directory will contain the downloaded extensions.

The crawler and create-db scripts will access and update a MariaDB. They will use the host, datebase, and credentials found in ~/.my.cnf. Since they make use of various JSON features, it is recommended to use at least version 10.2.8 of MariaDB.

All utilities are written in Python 3.6. The required modules are listed in the file requirements.txt.

Installation

Clone and use pip3 to install as a package.

git clone git@logicalhacking.com:BrowserSecurity/ExtensionCrawler.git
pip3 install --user -e ExtensionCrawler

Team

Contributors

  • Mehmet Balande

License

This project is licensed under the GPL 3.0 (or any later version).

SPDX-License-Identifier: GPL-3.0-or-later

Master Repository

The master git repository for this project is hosted by the Software Assurance & Security Research Team at https://git.logicalhacking.com/BrowserSecurity/ExtensionCrawler.