[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Demoboost Capture 1.0

Version 3.4.0 View in Chrome Web Store

Last scanned: about 8 hours ago

Extension Details

Developer: demoboost.com

Rating: 5.0 ★ (6 ratings)

Users: 323

Context-Aware Verdict

MEDIUM

Overall Risk

Based on 4 total findings, including 1 high-risk finding.

Findings

HIGH

Broad Content Script Injection

This extension can inject scripts into any website. This means it could potentially read sensitive data, modify website content, or steal credentials.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

activeTab
storage
unlimitedStorage
scripting

Embedded URLs (1973 total):

http://www.w3.org/2000/svg	http://www.w3.org/XML/1998/namespace
http://www.w3.org/2000/xmlns/	http://www.w3.org/1999/xlink
https://chrome.google.com/webstore/detail/singlefile/mpiodijhokgodhhofbcjdecpffjipkle	https://microsoftedge.microsoft.com/addons/detail/singlefile/efnbkdcfmcmnhlkaijjjmhjjgladedno
https://github.com/csstree/csstree/issues	https://mozilla.org/MPL/2.0/.
https://publicsuffix.org/list/public_suffix_list.dat	https://publicsuffix.org/list/.
http://nic.ac/rules.htm	https://en.wikipedia.org/wiki/.ad
https://tdra.gov.ae/en/aeda/ae-policies	https://www.information.aero/index.php?id=66
http://www.nic.af/help.jsp	http://www.nic.ag/prices.htm
http://nic.com.ai/	http://www.ert.gov.al/ert_alb/faq_det.html?Id=31
https://www.amnic.net/policy/en/Policy_EN.pdf	https://en.wikipedia.org/wiki/.ao
http://www.dns.ao/REGISTR.DOC	https://en.wikipedia.org/wiki/.aq
https://nic.ar/es/nic-argentina/normativa	https://en.wikipedia.org/wiki/.arpa
https://en.wikipedia.org/wiki/.as	https://en.wikipedia.org/wiki/.asia
https://en.wikipedia.org/wiki/.at	https://en.wikipedia.org/wiki/.au
http://www.auda.org.au/	http://www.cgdn.org.au/
https://en.wikipedia.org/wiki/.aw	https://en.wikipedia.org/wiki/.ax
https://en.wikipedia.org/wiki/.az	http://nic.ba/users_data/files/pravilnik_o_registraciji.pdf
https://en.wikipedia.org/wiki/.bb	https://en.wikipedia.org/wiki/.bd
https://en.wikipedia.org/wiki/.be	https://en.wikipedia.org/wiki/.bf
https://en.wikipedia.org/wiki/.bg	https://www.register.bg/user/static/rules/en/index.html
https://en.wikipedia.org/wiki/.bh	https://en.wikipedia.org/wiki/.bi
http://whois.nic.bi/	https://en.wikipedia.org/wiki/.biz
https://nic.bj/bj-suffixes.txt	http://www.bermudanic.bm/dnr-text.txt
http://www.bnnic.bn/faqs	https://nic.bo/delegacion2015.php#h-1.10
http://registro.br/dominio/categoria.html	https://en.wikipedia.org/wiki/States_of_Brazil
http://www.nic.bs/rules.html	https://en.wikipedia.org/wiki/.bt
https://en.wikipedia.org/wiki/.bw	http://www.gobin.info/domainname/bw.doc
https://en.wikipedia.org/wiki/.by	http://tld.by/rules_2006_en.html
http://hoster.by/	https://en.wikipedia.org/wiki/.bz
http://www.belizenic.bz/	https://en.wikipedia.org/wiki/.ca
https://en.wikipedia.org/wiki/.gc.ca	http://registry.gc.ca/en/SubdomainFAQ
https://en.wikipedia.org/wiki/.cat	https://en.wikipedia.org/wiki/.cc
https://en.wikipedia.org/wiki/.cd	https://www.nic.cd/domain/insertDomain_2.jsp?act=1
https://en.wikipedia.org/wiki/.cf	https://en.wikipedia.org/wiki/.cg
https://en.wikipedia.org/wiki/.ch	https://en.wikipedia.org/wiki/.ci
http://www.nic.ci/index.php?page=charte	https://en.wikipedia.org/wiki/.ck
https://www.nic.cl	https://en.wikipedia.org/wiki/.cm
https://en.wikipedia.org/wiki/.cn	https://en.wikipedia.org/wiki/.co
https://en.wikipedia.org/wiki/.com	https://en.wikipedia.org/wiki/.coop
http://www.nic.cr/niccr_publico/showRegistroDominiosScreen.do	https://en.wikipedia.org/wiki/.cu

Page 1 of 25

Raw Manifest

{
  "name": "Demoboost Capture 1.0",
  "icons": {
    "16": "logo_16.png",
    "32": "logo_32.png",
    "48": "logo_48.png",
    "128": "logo_128.png"
  },
  "action": {
    "default_popup": "index.html",
    "default_title": "Demoboost Capture 1.0"
  },
  "version": "3.4.0",
  "background": {
    "service_worker": "./static/js/background.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "Demo experience that sells. Easily create, share and track your demos.",
  "permissions": [
    "activeTab",
    "storage",
    "unlimitedStorage",
    "scripting"
  ],
  "content_scripts": [
    {
      "js": [
        "lib/chrome-browser-polyfill.js",
        "lib/single-file-frames.js",
        "lib/extension-frames.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*/*"
      ],
      "all_frames": true,
      "match_about_blank": true
    },
    {
      "js": [
        "lib/chrome-browser-polyfill.js",
        "lib/single-file-bootstrap.js",
        "lib/extension-core.js",
        "lib/single-file.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*/*"
      ],
      "all_frames": false
    },
    {
      "js": [
        "./static/js/canvas.js"
      ],
      "world": "MAIN",
      "run_at": "document_start",
      "matches": [
        "<all_urls>"
      ],
      "all_frames": true
    },
    {
      "js": [
        "./static/js/content.js"
      ],
      "run_at": "document_start",
      "matches": [
        "*://*/*"
      ],
      "all_frames": true,
      "persistent": false
    }
  ],
  "manifest_version": 3,
  "web_accessible_resources": [
    {
      "matches": [
        "*://*/*"
      ],
      "resources": [
        "lib/web/hooks/hooks-web.js",
        "lib/web/hooks/hooks-frames-web.js"
      ]
    }
  ],
  "optional_host_permissions": [
    "*://*/*"
  ]
}

by ✦ Astarte

Demoboost Capture 1.0

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Embedded URLs (1973 total):

Raw Manifest

Detections

Manifest Findings