[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Авито аналитика от bananlab.ru

Version 62 View in Chrome Web Store

Last scanned: about 11 hours ago

Extension Details

Rating: 4.6 ★ (17 ratings)

Users: 5,000

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 2 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
alarms
scripting

Host Permissions:

https://www.avito.ru/*
https://m.avito.ru/*

Content Security Policy:

extension_pages: default-src 'self'; connect-src https://www.avito.ru https://* data: blob: filesystem:;

Embedded URLs (99 total):

https://www.avito.ru/performance/	https://www.avito.ru/web/1/serp/search
https://www.avito.ru/profile/pro/items	https://www.avito.ru/
https://www.avito.ru/web/1/urgency/items/setTypedUrgency	https://bananlab.ru/list_tools/?fr=1
https://pro-api.avito.ru/gate/web/1/serp/search	https://www.avito.ru/web/1/profile/item/multiActions/delete
https://pro-api.avito.ru/gate/web/1/profile/item/multiActions/delete	https://www.avito.ru/profile
https://www.avito.ru/profile/pro	https://t.me/avitolog_bez_prikras/149
http://stuartk.com/jszip	https://raw.github.com/Stuk/jszip/main/LICENSE.markdown.
https://github.com/nodeca/pako/blob/main/LICENSE	https://stuk.github.io/jszip/documentation/howto/read_zip.html
http://sheetjs.com	http://schemas.openxmlformats.org/package/2006/metadata/core-properties
http://schemas.openxmlformats.org/officeDocument/2006/custom-properties	http://schemas.openxmlformats.org/officeDocument/2006/extended-properties
http://schemas.openxmlformats.org/package/2006/content-types	http://schemas.openxmlformats.org/package/2006/relationships
http://schemas.microsoft.com/office/spreadsheetml/2018/threadedcomments	http://purl.org/dc/elements/1.1/
http://purl.org/dc/terms/	http://purl.org/dc/dcmitype/
http://schemas.microsoft.com/office/mac/excel/2008/main	http://schemas.openxmlformats.org/officeDocument/2006/relationships
http://schemas.openxmlformats.org/package/2006/sheetjs/core-properties	http://schemas.openxmlformats.org/officeDocument/2006/docPropsVTypes
http://www.w3.org/2001/XMLSchema-instance	http://www.w3.org/2001/XMLSchema
http://schemas.openxmlformats.org/spreadsheetml/2006/main	http://purl.oclc.org/ooxml/spreadsheetml/main
http://schemas.microsoft.com/office/excel/2006/main	http://schemas.microsoft.com/office/excel/2006/2
http://www.w3.org/TR/REC-html40	http://schemas.openxmlformats.org/officeDocument/2006/relationships/officeDocument
http://sheetjs.openxmlformats.org/officeDocument/2006/relationships/officeDocument	http://schemas.openxmlformats.org/officeDocument/2006/relationships/hyperlink
http://schemas.openxmlformats.org/officeDocument/2006/relationships/vmlDrawing	http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLinkPath
http://schemas.microsoft.com/office/2006/relationships/xlExternalLinkPath/xlPathMissing	http://schemas.openxmlformats.org/officeDocument/2006/relationships/externalLink
http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXml	http://schemas.openxmlformats.org/officeDocument/2006/relationships/customXmlProps
http://schemas.openxmlformats.org/officeDocument/2006/relationships/comments	http://schemas.openxmlformats.org/package/2006/relationships/metadata/core-properties
http://schemas.openxmlformats.org/officeDocument/2006/relationships/extended-properties	http://schemas.openxmlformats.org/officeDocument/2006/relationships/custom-properties
http://schemas.openxmlformats.org/officeDocument/2006/relationships/sharedStrings	http://schemas.openxmlformats.org/officeDocument/2006/relationships/styles
http://schemas.openxmlformats.org/officeDocument/2006/relationships/theme	http://schemas.openxmlformats.org/officeDocument/2006/relationships/chart
http://schemas.microsoft.com/office/2014/relationships/chartEx	http://schemas.openxmlformats.org/officeDocument/2006/relationships/chartsheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/worksheet	http://purl.oclc.org/ooxml/officeDocument/relationships/worksheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/dialogsheet	http://schemas.microsoft.com/office/2006/relationships/xlMacrosheet
http://schemas.openxmlformats.org/officeDocument/2006/relationships/image	http://schemas.openxmlformats.org/officeDocument/2006/relationships/drawing
http://schemas.openxmlformats.org/officeDocument/2006/relationships/sheetMetadata	http://schemas.microsoft.com/office/2017/10/relationships/threadedComment
http://schemas.microsoft.com/office/2017/10/relationships/person	http://schemas.microsoft.com/office/2006/relationships/vbaProject
http://docs.oasis-open.org/ns/office/1.2/meta/	http://docs.oasis-open.org/ns/office/1.2/meta/pkg#
http://www.w3.org/1999/02/22-rdf-syntax-ns#	http://www.w3.org/1999/xlink
http://schemas.openxmlformats.org/drawingml/2006/main	http://schemas.microsoft.com/office/spreadsheetml/2017/richdata
http://schemas.microsoft.com/office/spreadsheetml/2017/dynamicarray	http://www.w3.org/1998/Math/MathML
http://openoffice.org/2004/office	http://openoffice.org/2004/writer
http://openoffice.org/2004/calc	http://www.w3.org/2001/xml-events
http://www.w3.org/2002/xforms	http://openoffice.org/2005/report

Page 1 of 2

Raw Manifest

{
  "name": "Авито аналитика от bananlab.ru",
  "icons": {
    "16": "icon16.png",
    "48": "icon48.png",
    "128": "icon128.png"
  },
  "action": {
    "default_icon": {
      "16": "icon16.png",
      "48": "icon48.png",
      "128": "icon128.png"
    },
    "default_popup": "popup.html"
  },
  "version": "62",
  "background": {
    "service_worker": "background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Бесплатное расширение возможностей сайта Авито. Подробнее читайте в описании!",
  "permissions": [
    "storage",
    "alarms",
    "scripting"
  ],
  "content_scripts": [
    {
      "js": [
        "content.js",
        "service-urgency.js",
        "ad_stat.js"
      ],
      "css": [
        "my.css"
      ],
      "matches": [
        "https://www.avito.ru/profile/*"
      ],
      "exclude_matches": [
        "https://www.avito.ru/profile/messenger*"
      ]
    },
    {
      "js": [
        "lib/jszip.min.js",
        "lib/xlsx.full.min.js",
        "search-parser/config.js",
        "search-parser/search-table.js",
        "search-parser/search-table-ui.js",
        "search-parser/avito-api.js",
        "search-parser/process-tables.js",
        "search-parser/pics-parser/parse-pics.js",
        "search-parser/pics-parser/pics-ui.js"
      ],
      "css": [
        "my.css"
      ],
      "matches": [
        "https://www.avito.ru/*"
      ],
      "exclude_matches": [
        "https://www.avito.ru/profile/*",
        "https://www.avito.ru/user/*",
        "https://www.avito.ru/brands/*"
      ]
    },
    {
      "js": [
        "lib/jszip.min.js",
        "lib/xlsx.full.min.js",
        "stores-parser/stores-parser.js",
        "stores-parser/utils.js",
        "stores-parser/stores-parser-ui.js",
        "stores-parser/parse.js"
      ],
      "css": [
        "my.css"
      ],
      "matches": [
        "https://www.avito.ru/user/*",
        "https://www.avito.ru/brands/*"
      ]
    },
    {
      "js": [
        "messenger-button.js"
      ],
      "css": [
        "my.css"
      ],
      "matches": [
        "https://www.avito.ru/profile/messenger"
      ]
    }
  ],
  "host_permissions": [
    "https://www.avito.ru/*",
    "https://m.avito.ru/*"
  ],
  "manifest_version": 3,
  "content_security_policy": {
    "extension_pages": "default-src 'self'; connect-src https://www.avito.ru https://* data: blob: filesystem:;"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "lib/jszip.min.js",
        "lib/xlsx.full.min.js"
      ]
    }
  ]
}

by ✦ Astarte