[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Chrome Remote Desktop

Version 2.1 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Developer: Google Ireland, Ltd.

Rating: 3.8 ★ (3K ratings)

Users: 41,000,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 1 total findings, including 1 high-risk finding.

Findings

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

Security Analysis Details

Required Permissions:

nativeMessaging
downloads

Embedded URLs (31 total):

https://remotedesktop.google.com/	https://clients2.google.com/service/update2/crx
https://remotedesktop.corp.google.com/	https://remotedesktop-dev.corp.google.com/
https://remotedesktop-autopush.corp.google.com/	https://remotedesktop-daily-0.corp.google.com/
https://remotedesktop-daily-1.corp.google.com/	https://remotedesktop-daily-2.corp.google.com/
https://remotedesktop-daily-3.corp.google.com/	https://remotedesktop-daily-4.corp.google.com/
https://remotedesktop-daily-5.corp.google.com/	https://remotedesktop-daily-6.corp.google.com/
https://remotesupport.corp.google.com/	https://remotesupport-dev.corp.google.com/
https://remotesupport-autopush.corp.google.com/	https://remotesupport-daily-0.corp.google.com/
https://remotesupport-daily-1.corp.google.com/	https://remotesupport-daily-2.corp.google.com/
https://remotesupport-daily-3.corp.google.com/	https://remotesupport-daily-4.corp.google.com/
https://remotesupport-daily-5.corp.google.com/	https://remotesupport-daily-6.corp.google.com/
https://remoting.sandbox.google.com/	https://remoting-autopush.sandbox.google.com/
https://remoting-daily-0.sandbox.google.com/	https://remoting-daily-1.sandbox.google.com/
https://remoting-daily-2.sandbox.google.com/	https://remoting-daily-3.sandbox.google.com/
https://remoting-daily-4.sandbox.google.com/	https://remoting-daily-5.sandbox.google.com/
https://remoting-daily-6.sandbox.google.com/

Raw Manifest

{
  "name": "Chrome Remote Desktop",
  "icons": {
    "48": "chromoting48.png",
    "128": "chromoting128.png"
  },
  "action": {},
  "version": "2.1",
  "background": {
    "service_worker": "event_page_binary.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Chrome Remote Desktop extension",
  "permissions": [
    "nativeMessaging",
    "downloads"
  ],
  "manifest_version": 3,
  "externally_connectable": {
    "matches": [
      "https://remotedesktop.corp.google.com/*",
      "https://remotedesktop.google.com/*",
      "https://remotedesktop-dev.corp.google.com/*",
      "https://remotedesktop-autopush.corp.google.com/*",
      "https://remotedesktop-daily-0.corp.google.com/*",
      "https://remotedesktop-daily-1.corp.google.com/*",
      "https://remotedesktop-daily-2.corp.google.com/*",
      "https://remotedesktop-daily-3.corp.google.com/*",
      "https://remotedesktop-daily-4.corp.google.com/*",
      "https://remotedesktop-daily-5.corp.google.com/*",
      "https://remotedesktop-daily-6.corp.google.com/*",
      "https://remotesupport.corp.google.com/*",
      "https://remotesupport-dev.corp.google.com/*",
      "https://remotesupport-autopush.corp.google.com/*",
      "https://remotesupport-daily-0.corp.google.com/*",
      "https://remotesupport-daily-1.corp.google.com/*",
      "https://remotesupport-daily-2.corp.google.com/*",
      "https://remotesupport-daily-3.corp.google.com/*",
      "https://remotesupport-daily-4.corp.google.com/*",
      "https://remotesupport-daily-5.corp.google.com/*",
      "https://remotesupport-daily-6.corp.google.com/*",
      "https://remoting.sandbox.google.com/*",
      "https://remoting-autopush.sandbox.google.com/*",
      "https://remoting-daily-0.sandbox.google.com/*",
      "https://remoting-daily-1.sandbox.google.com/*",
      "https://remoting-daily-2.sandbox.google.com/*",
      "https://remoting-daily-3.sandbox.google.com/*",
      "https://remoting-daily-4.sandbox.google.com/*",
      "https://remoting-daily-5.sandbox.google.com/*",
      "https://remoting-daily-6.sandbox.google.com/*"
    ]
  }
}

by ✦ Astarte