[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

FXSoft © Acbooks ™

Version 0.4.5 View in Chrome Web Store

Last scanned: about 4 hours ago

Extension Details

Rating: 5.0 ★ (18 ratings)

Users: 359

Context-Aware Verdict

CRITICAL

Overall Risk

Based on 9 total findings, including 7 high-risk findings.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: clipboardRead

This extension has the clipboardRead permission. Can read clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: clipboardWrite

This extension has the clipboardWrite permission. Can modify clipboard content. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: debugger

This extension has the debugger permission. Can debug and manipulate other extensions/apps. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: downloads

This extension has the downloads permission. Can download files and access download history. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: webRequest

This extension has the webRequest permission. Can intercept and modify web requests. This could potentially be used maliciously to compromise security or privacy.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

Security Analysis Details

Required Permissions:

storage
webRequest
clipboardRead
clipboardWrite
offscreen
downloads
activeTab
debugger
scripting

Host Permissions:

http://*/*
*://*/*

Embedded URLs (57 total):

https://html2canvas.hertzen.com	https://hertzen.com
http://www.w3.org/2000/svg	https://services.ksavisa.sa/Account/Login/enjazcompany
https://visa.mofa.gov.sa/Account/Login	https://visa.mofa.gov.sa/Account/Login/enjazcompany
https://services.ksavisa.sa/Enjaz/GetVisaInformation/Person	https://services.ksavisa.sa/Enjaz/ViewVisaDetails/Person
https://visa.mofa.gov.sa/Enjaz/GetVisaInformation/Person	https://visa.mofa.gov.sa/Enjaz/ViewVisaDetails/Person
https://services.ksavisa.sa/SmartForm/TraditionalApp	https://visa.mofa.gov.sa/SmartForm/TraditionalApp
https://beoe.gov.pk/oep-portal/emigrant-registrations/create	https://services.ksavisa.sa/
https://services.ksavisa.sa/Enjaz/Main	https://identity.ksavisa.sa/Account/Login
https://visa.mofa.gov.sa/	https://visa.mofa.gov.sa/Enjaz/Main
https://sweetalert2.github.io/#ajax-request	https://github.com/sweetalert2/sweetalert2/wiki/Migration-from-SweetAlert-to-SweetAlert2#1-ie-support
https://github.com/MrRio/jsPDF	http://www.yworks.com
https://github.com/HackbrettXXX	https://github.com/acspike
https://github.com/willowsystems	https://github.com/pablohess
https://github.com/fjenett	https://github.com/warrenweckesser
https://github.com/lifof	https://github.com/lsdriscoll
https://github.com/stefslon	https://github.com/jmorel
https://github.com/chris-rock	https://github.com/juanpgaviria
https://github.com/dollaruw	https://github.com/diegocr
https://github.com/Flamenco	https://github.com/Gavvers
http://www.phpied.com/rgb-color-parser-in-javascript/	http://www.myersdaily.org/joseph/javascript/md5.js
http://www.fpdf.org/en/script/script37.php	http://opensource.org/licenses/mit-license
https://www.cs.cmu.edu/~dst/Adobe/Gallery/anon21jul01-pdf-encryption.txt	https://github.com/foliojs/pdfkit/blob/master/lib/security.js
https://cdnjs.cloudflare.com/ajax/libs/pdfobject/2.1.1/pdfobject.min.js	https://github.com/nodeca/pako
https://github.com/deanm/omggif	https://webpjs.appspot.com
https://github.com/Pantura	http://www.w3.org/1999/02/22-rdf-syntax-ns#
http://jspdf.default.namespaceuri/	https://clients2.google.com/service/update2/crx
https://beoe.gov.pk/oep-portal/permissions/create	https://services.ksavisa.sa/Enjaze/ViewVisaDetails/Person
https://services.ksavisa.sa/Enjaze/GetVisaInformation/Person	https://visa.mofa.gov.sa/SmartForm/ElectronicAgreement
https://services.ksavisa.sa/SmartForm/ElectronicAgreement

Raw Manifest

{
  "name": "FXSoft © Acbooks ™",
  "icons": {
    "16": "/img/icon_16.png",
    "48": "/img/icon_48.png",
    "128": "/img/icon_128.png"
  },
  "action": {
    "default_title": "FXSoft Acbooks For Recruiting"
  },
  "version": "0.4.5",
  "background": {
    "type": "module",
    "service_worker": "/js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Recruiting",
  "permissions": [
    "storage",
    "webRequest",
    "clipboardRead",
    "clipboardWrite",
    "offscreen",
    "downloads",
    "activeTab",
    "debugger",
    "scripting"
  ],
  "content_scripts": [
    {
      "js": [
        "/js/jquery.min.js",
        "/js/visa_information_login.js"
      ],
      "css": [
        "/css/visa_information_login.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://visa.mofa.gov.sa/Enjaz/GetVisaInformation/Person*",
        "https://services.ksavisa.sa/Enjaz/GetVisaInformation/Person*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/view_visa_details.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://visa.mofa.gov.sa/Enjaz/ViewVisaDetails/Person",
        "https://services.ksavisa.sa/Enjaz/ViewVisaDetails/Person"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/page_redirection.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://visa.mofa.gov.sa/",
        "https://visa.mofa.gov.sa/Account/Login/enjazcompany",
        "https://visa.mofa.gov.sa/Enjaz/Main",
        "https://visa.mofa.gov.sa/Account/Login",
        "https://services.ksavisa.sa/",
        "https://services.ksavisa.sa/Account/Login/enjazcompany",
        "https://services.ksavisa.sa/Enjaz/Main",
        "https://identity.ksavisa.sa/Account/Login"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/new_form_ptn.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://beoe.gov.pk/oep-portal/permissions/create*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/new_form_ptn.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://beoe.gov.pk/oep-portal/permissions/create"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/new_form_reg.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://beoe.gov.pk/oep-portal/emigrant-registrations/create*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/new_form_reg.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://beoe.gov.pk/oep-portal/emigrant-registrations/create*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/new_form_filling.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_idle",
      "matches": [
        "https://visa.mofa.gov.sa/SmartForm/TraditionalApp*",
        "https://services.ksavisa.sa/SmartForm/TraditionalApp*"
      ]
    },
    {
      "js": [
        "/js/banner.js"
      ],
      "run_at": "document_start",
      "matches": [
        "https://visa.mofa.gov.sa/SmartForm/TraditionalApp*",
        "https://services.ksavisa.sa/SmartForm/TraditionalApp*",
        "https://beoe.gov.pk/oep-portal/emigrant-registrations/create*",
        "https://beoe.gov.pk/oep-portal/permissions/create*",
        "https://services.ksavisa.sa/Enjaze/ViewVisaDetails/Person*",
        "https://services.ksavisa.sa/Enjaze/GetVisaInformation/Person*",
        "https://visa.mofa.gov.sa/Enjaz/ViewVisaDetails/Person*",
        "https://visa.mofa.gov.sa/Enjaz/GetVisaInformation/Person*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/electronic_form_filling.js",
        "/js/sweetalert2.all.min.js"
      ],
      "css": [
        "/css/view_visa_details.css"
      ],
      "run_at": "document_end",
      "matches": [
        "https://visa.mofa.gov.sa/SmartForm/ElectronicAgreement*",
        "https://services.ksavisa.sa/SmartForm/ElectronicAgreement*"
      ]
    },
    {
      "js": [
        "/js/jquery.min.js",
        "/js/all.js",
        "/js/sweetalert2.all.min.js"
      ],
      "run_at": "document_end",
      "matches": [
        "*://*/*"
      ]
    },
    {
      "js": [
        "jspdf.umd.min.js",
        "html2canvas.min.js",
        "content.js"
      ],
      "css": [
        "/css/commonstyles.css"
      ],
      "matches": [
        "<all_urls>"
      ]
    }
  ],
  "host_permissions": [
    "http://*/*",
    "*://*/*"
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/img/spinner.gif"
      ]
    },
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "/js/external_select2_caller.js",
        "/js/common_globals"
      ]
    }
  ]
}

by ✦ Astarte

FXSoft © Acbooks ™

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Host Permissions:

Embedded URLs (57 total):

Raw Manifest

Detections

Manifest Findings