[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Group Extractor & Export Group Members - extractor.plus

Version 1.6.4 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Developer: extractor.plus

Rating: 4.2 ★ (302 ratings)

Users: 2,000

Context-Aware Verdict

HIGH

Overall Risk

Trust Factors:

The extension has a moderate user base of 2,000 users with a decent 4.2-star rating from 302 reviews, suggesting some level of user satisfaction. However, the developer "extractor.plus" lacks established reputation or transparency about their identity and practices. The extension's purpose of extracting Facebook group members raises inherent privacy concerns, as it involves harvesting personal data from social networks.

Concerns:

The combination of cookies and webRequest permissions is particularly concerning for a group extraction tool. While storage permissions are reasonable for data export functionality, the webRequest permission allows the extension to intercept and potentially modify all web traffic, which goes beyond what's necessary for simply extracting group member information. The cookies permission could enable unauthorized access to user accounts or session hijacking. The extension's access to Facebook groups means it can potentially harvest sensitive personal information from group members who haven't consented to data collection.

Recommendations:

Given the high-risk permissions and data harvesting nature, consider running this extension in a separate Chrome profile to isolate it from your main browsing activities. Only use it when absolutely necessary and disable it when not in use. Be aware that using such tools may violate Facebook's terms of service and could result in account restrictions. Consider whether the group extraction functionality is worth the privacy and security risks, especially given the broad permissions requested.

Findings

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Access to Sensitive Domains

This extension requests access to sensitive domains: https://www.facebook.com/. Ensure you trust this extension with access to these sites.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

storage
unlimitedStorage
cookies
webRequest

Host Permissions:

https://www.facebook.com/

Embedded URLs (92 total):

http://www.w3.org/2000/svg	https://plotly.com/
https://github.com/d3/d3-format/tree/v1.4.5#d3-format	https://github.com/d3/d3-time-format/tree/v2.2.3#locale_format
http://www.w3.org/2000/xmlns/	http://www.w3.org/1999/xlink
https://plotly.com/javascript/animations/	https://cdn.plot.ly/
http://www.w3.org/1999/xhtml	http://www.w3.org/XML/1998/namespace
https://extractor.plus	https://extractor.plus/fb-group-extractor/
https://github.com/zloirock/core-js/blob/v3.32.1/LICENSE	https://github.com/zloirock/core-js
https://npms.io/search?q=ponyfill.	http://www.w3.org/1998/Math/MathML
https://endpoints.extractor.plus/speak/rxp	https://endpoints.extractor.plus/speak/xhiovvxkfux?d=
https://endpoints.extractor.plus	http://schemas.openxmlformats.org/package/2006/metadata/core-properties
http://schemas.openxmlformats.org/officeDocument/2006/custom-properties	http://schemas.openxmlformats.org/officeDocument/2006/extended-properties
http://schemas.openxmlformats.org/package/2006/content-types	http://schemas.openxmlformats.org/package/2006/relationships
http://schemas.microsoft.com/office/spreadsheetml/2018/threadedcomments	http://purl.org/dc/elements/1.1/
http://purl.org/dc/terms/	http://purl.org/dc/dcmitype/
http://schemas.microsoft.com/office/mac/excel/2008/main	http://schemas.openxmlformats.org/officeDocument/2006/relationships
http://schemas.openxmlformats.org/package/2006/sheetjs/core-properties	http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes
http://www.w3.org/2001/XMLSchema-instance	http://www.w3.org/2001/XMLSchema
http://schemas.openxmlformats.org/spreadsheetml/2006/main	http://purl.oclc.org/ooxml/spreadsheetml/main
http://schemas.microsoft.com/office/excel/2006/main	http://schemas.microsoft.com/office/excel/2006/2
http://www.w3.org/TR/REC-html40	http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument
http://sheetjs.openxmlformats.org/officeDocument/2006/relationships/officeDocument	http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink
http://schemas.openxmlformats.org/officeDocument/2006/relationships/vmlDrawing	http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLinkPath
http://schemas.microsoft.com/office/2006/relationships/xlExternalLinkPath/xlPathMissing	http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLink
http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXml	http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXmlProps
http://schemas.openxmlformats.org/officeDocument/2006/relationships/comments	http://schemas.openxmlformats.org/package/2006/relationships/metadata/core-properties
http://schemas.openxmlformats.org/officeDocument/2006/relationships/extended-properties	http://schemas.openxmlformats.org/officeDocument/2006/relationships/custom-properties
http://schemas.openxmlformats.org/officeDocument/2006/relationships/sharedStrings	http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles
http://schemas.openxmlformats.org/officeDocument/2006/relationships/theme	http://schemas.openxmlformats.org/officeDocument/2006/relationships/chart
http://schemas.microsoft.com/office/2014/relationships/chartEx	http://schemas.openxmlformats.org/officeDocument/2006/relationships/chartsheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet	http://purl.oclc.org/ooxml/officeDocument/relationships/worksheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/dialogsheet	http://schemas.microsoft.com/office/2006/relationships/xlMacrosheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/image	http://schemas.openxmlformats.org/officeDocument/2006/relationships/drawing
http://schemas.openxmlformats.org/officeDocument/2006/relationships/sheetMetadata	http://schemas.microsoft.com/office/2017/10/relationships/threadedComment
http://schemas.microsoft.com/office/2017/10/relationships/person	http://schemas.openxmlformats.org/officeDocument/2006/relationships/connections
http://schemas.microsoft.com/office/2006/relationships/vbaProject	http://docs.oasis-open.org/ns/office/1.2/meta/
http://docs.oasis-open.org/ns/office/1.2/meta/pkg#	http://schemas.openxmlformats.org/drawingml/2006/main
http://openoffice.org/2004/office	http://openoffice.org/2004/writer
http://openoffice.org/2004/calc	http://www.w3.org/2001/xml-events
http://www.w3.org/2002/xforms	http://openoffice.org/2005/report
http://www.w3.org/2003/g/data-view#	http://openoffice.org/2009/table

Page 1 of 2

Raw Manifest

{
  "key": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx8WubfeP9vJDQnRjl6Y24PGYNj1Pu37tl1PjkrwOdk1Q4D1VOvr2BQwrertF1zr+QdKmbHYk/8DA3bRM2AnAub/C+PlFowRWWjSEyD6c0GQd6nkneJdEMeUHzec5TQwKMjDwT4mWN8qidFs9i+56ilz6m9nmi8zo/xOn5gvPIlYKmGZmKHriRp1m3PMLyOE5+icrNlN4iI/peHNA0LtuQ9o6jnbuzt5SVpNpBi5xHQ8/vfnKUg/JGhVKHj7CKnSsIsTbpilukR7rwGMojM/mnluWDrats90Df00YC9OAQrmoZOp+c2rrv0WNEssajduqR9s7MNLnbdASLlNjW1OSQIDAQAB",
  "name": "__MSG_showName__",
  "icons": {
    "16": "icons/16.png",
    "32": "icons/32.png",
    "48": "icons/48.png",
    "128": "icons/128.png"
  },
  "action": {
    "default_icon": "icons/48.png",
    "default_popup": "popup.html"
  },
  "version": "1.6.4",
  "background": {
    "type": "module",
    "service_worker": "js/background.0907d639.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_showDes__",
  "permissions": [
    "storage",
    "unlimitedStorage",
    "cookies",
    "webRequest"
  ],
  "homepage_url": "https://extractor.plus/fb-group-extractor/",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "js/content-script.0907d639.js"
      ],
      "css": [
        "css/content-script_c2e95f41.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://www.facebook.com/groups/*"
      ],
      "all_frames": false
    }
  ],
  "host_permissions": [
    "https://www.facebook.com/"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "img/*",
        "js/*"
      ]
    }
  ]
}

by ✦ Astarte

Group Extractor & Export Group Members - extractor.plus

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (92 total):

Raw Manifest

Detections

Manifest Findings