CRX aminer
Extension icon

Vulners Web Scanner

Version 3.0.1 View in Chrome Web Store

Last scanned: about 3 hours ago

Extension Details

Rating: 4.4 ★ (21 ratings)
Users: 9,000

Context-Aware Verdict

HIGH
Overall Risk
Trust Factors:

The extension has a moderate user base of 9,000 users with a solid 4.4-star rating from 21 reviews, suggesting generally positive user experiences. However, the limited number of reviews relative to the user base raises some questions about user engagement. The extension appears to be a legitimate security tool for web vulnerability scanning, which would justify some of its extensive permissions.

Concerns:

The extension requests extremely broad permissions that create significant security risks. The combination of tabs, webRequest permissions, and universal host access (*://*/*) gives this extension unprecedented control over all web browsing activity. It can intercept, monitor, and potentially modify all web traffic across every website visited. While these permissions may be necessary for vulnerability scanning functionality, they also create substantial potential for abuse. The webRequest permission is particularly concerning as it allows complete interception of network communications, including sensitive data like login credentials and personal information.

Recommendations:

Given the high-risk nature of these permissions, install this extension only in a dedicated Chrome profile used specifically for security testing activities. Never use this profile for personal browsing, banking, or accessing sensitive accounts. Regularly review the extension's activity and remove it when not actively needed for security assessments. Consider whether the vulnerability scanning functionality justifies the extensive access to your browsing data.

Findings

HIGH
Broad Host Permissions
This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.
HIGH
High-Risk Permission: tabs
This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.
HIGH
High-Risk Permission: webRequest
This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.
MEDIUM
Medium-Risk Permission: storage
This extension has the storage permission. Can store data locally.