[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Guru VPN & Proxy, VPN to Unblock any sites

Version 1.1.7 View in Chrome Web Store

Last scanned: about 5 hours ago

Extension Details

Rating: 3.5 ★ (33 ratings)

Users: 3,000

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 9 total findings, including 5 high-risk findings.

Findings

HIGH

Dangerous Permission Combination: webRequest + webRequestBlocking

This extension can intercept, modify, and block web requests in real-time. This combination could be used to modify sensitive web traffic or steal data.

HIGH

High-Risk Permission: <all_urls>

This extension has the <all_urls> permission. Can access all websites and their content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: proxy

This extension has the proxy permission. Can control proxy settings. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequestBlocking

This extension has the webRequestBlocking permission. Can block and modify web requests in real-time. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

MEDIUM

Older Manifest Version

This extension uses Manifest Version 2, which has fewer security restrictions than Manifest V3. Consider using extensions that have upgraded to V3.

Security Analysis Details

Required Permissions:

proxy
storage
activeTab
*://*/*
unlimitedStorage
<all_urls>
webRequest
webRequestBlocking

Optional Permissions:

management

Embedded URLs (33 total):

https://github.com/yahoo/pure/blob/master/LICENSE.md	http://www.w3.org/2000/svg
http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd	http://www.w3.org/1999/xlink
https://vk.com	https://code.jquery.com/jquery-3.6.0.slim.js
http://code.accursoft.com/caret	http://jscompress.com/
https://github.com/gromo/jquery.scrollbar/	https://github.com/Pixabay/jQuery-tagEditor
https://mths.be/platform	https://bnjmnt4n.now.sh/
http://allyoucanleet.com/	https://mths.be/mit
http://people.mozilla.org/~jorendorff/es6-draft.html#sec-tolength	http://msdn.microsoft.com/en-us/library/ms537503
http://web.archive.org/web/20081122053950/http://msdn.microsoft.com/en-us/library/ms537503	http://www.howtocreate.co.uk/operaStuff/operaObject.html
http://dev.opera.com/articles/view/opera-mini-web-content-authoring-guidelines/#operamini	http://docs.blackberry.com/en/developers/deliverables/18169/HTTP_headers_sent_by_BB_Browser_1234911_11.jsp
http://www.opera.com/support/kb/view/843/	http://stackoverflow.com/questions/6768474/how-can-i-detect-which-javascript-engine-v8-or-jsc-is-used-at-runtime-in-androi
http://requirejs.org/docs/errors.html#mismatch	https://github.com/select2/select2/blob/master/LICENSE.md
http://10.211.55.3	https://toolbar.guruvpn.com
https://great-vpn.ru/landers/thank_you_guruvpn/%D1%81%D0%BF%D0%B0%D1%81%D0%B8%D0%B1%D0%BE%20%D0%B3%D1%83%D1%80%D1%83%D0%92%D0%9F%D0%9D/index.php	http://ip-api.com/json/?fields=status
https://chrome.google.com/webstore/detail/	https://clients2.google.com/service/update2/crx
https://fonts.googleapis.com/css2?family=Roboto&display=swap	https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
https://guruvpn.com/

Raw Manifest

{
  "name": "Guru VPN & Proxy, VPN to Unblock any sites",
  "icons": {
    "128": "img/icon72.png"
  },
  "version": "1.1.7",
  "background": {
    "scripts": [
      "js/libs/jquery-3.1.1.min.js",
      "js/libs/platform.js",
      "js/modules/config.js",
      "js/modules/utils.js",
      "js/modules/proxy_utils.js",
      "js/modules/error-catcher.js",
      "js/modules/feedback.js",
      "js/modules/ping.js",
      "js/modules/stats.js",
      "js/background.js",
      "js/modules/listener.js",
      "js/modules/push.js"
    ]
  },
  "options_ui": {
    "page": "options.html",
    "open_in_tab": false
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_appDesc__",
  "permissions": [
    "proxy",
    "storage",
    "activeTab",
    "*://*/*",
    "unlimitedStorage",
    "<all_urls>",
    "webRequest",
    "webRequestBlocking"
  ],
  "browser_action": {
    "default_icon": "img/icon64-gray.png",
    "default_popup": "popup.html",
    "default_title": "__MSG_appName__"
  },
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "js/libs/jquery-3.1.1.min.js"
      ],
      "css": [
        "css/push/toolbar.css"
      ],
      "matches": [
        "http://*/*",
        "https://*/*"
      ]
    }
  ],
  "manifest_version": 2,
  "optional_permissions": [
    "management"
  ]
}

by ✦ Astarte

Guru VPN & Proxy, VPN to Unblock any sites

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Embedded URLs (33 total):

Raw Manifest

Detections

Manifest Findings