[ new scan ] [ statistics ] [ github ] [ twitter ] [ help ]

Awesome Screen Recorder & Screenshot

Version 4.4.41 View in Chrome Web Store

Last scanned: about 12 hours ago

Extension Details

Developer: http://www.awesomescreenshot.com/

Rating: 4.7 ★ (29.2K ratings)

Users: 4,000,000

Context-Aware Verdict

CRITICAL

Overall Risk

Trust Factors:

The extension has strong user adoption with 4 million users and a high rating of 4.7 stars from nearly 30,000 reviews, suggesting legitimate functionality. The developer website (awesomescreenshot.com) appears to be an established company focused on screenshot and recording tools, which aligns with the extension's stated purpose.

Concerns:

The extension requests extremely broad permissions that extend far beyond basic screenshot functionality. The combination of tabs, cookies, and all_urls host permissions creates a powerful surveillance capability that could access sensitive data across all websites. The unsafe WebAssembly execution policy is particularly concerning as it allows potentially obfuscated malicious code. Content script injection on all HTTP/HTTPS sites, including specific targeting of Gmail, raises privacy concerns about email access. The unlimited storage permission combined with broad data access could enable extensive data collection and retention.

Recommendations:

Given the critical risk level, install this extension only in a separate Chrome profile isolated from sensitive browsing activities. Regularly review what data the extension might be collecting through your browser's privacy settings. Consider alternative screenshot tools with more limited permissions if you don't need advanced recording features. Monitor your browser performance for any unusual activity. If you must use this extension, avoid using it while accessing sensitive websites like banking or personal email accounts.

Findings

HIGH

Broad Host Permissions

This extension has broad host permissions allowing it to access many or all websites. This could potentially be used to steal sensitive data or track browsing activity.

HIGH

High-Risk Permission: cookies

This extension has the cookies permission. Can access and modify browser cookies. This could potentially be used maliciously to compromise security or privacy.

HIGH

High-Risk Permission: tabs

This extension has the tabs permission. Can access browser tab information and manipulate tabs. This could potentially be used maliciously to compromise security or privacy.

HIGH

Unsafe WebAssembly Execution

This extension's Content Security Policy allows 'wasm-unsafe-eval', which permits potentially dangerous WebAssembly code execution. This could be used to hide malicious code or perform CPU-intensive operations.

MEDIUM

Medium-Risk Permission: activeTab

This extension has the activeTab permission. Can access the active tab when clicking the extension icon.

MEDIUM

Medium-Risk Permission: contextMenus

This extension has the contextMenus permission. Can add items to the context menu.

MEDIUM

Medium-Risk Permission: storage

This extension has the storage permission. Can store data locally.

MEDIUM

Medium-Risk Permission: unlimitedStorage

This extension has the unlimitedStorage permission. Can store unlimited data locally.

Security Analysis Details

Required Permissions:

tabs
power
storage
unlimitedStorage
desktopCapture
tabCapture
cookies
activeTab
contextMenus
scripting
offscreen
alarms

Optional Permissions:

downloads

Host Permissions:

*://*.awesomescreenshot.com/
<all_urls>

Content Security Policy:

extension_pages: script-src 'self' 'wasm-unsafe-eval' ; object-src 'self'
sandbox: sandbox allow-scripts; script-src 'self' https://ssl.google-analytics.com https://www.google-analytics.com https://connect.facebook.net https://platform.twitter.com http://localhost:8097/; object-src 'self'; connect-src ws://localhost:8097

Embedded URLs (127 total):

https://www.awesomescreenshot.com/pricing?from=extMenu5min	https://www.awesomescreenshot.com/pricing?from=aws-upgrade
https://support.awesomescreenshot.com/hc/en-us/articles/25177478768793-What-should-I-do-when-I-see-Your-disk-storage-is-almost-full-Please-free-up-some-space-to-continue-recording-	https://fontawesome.com
https://fontawesome.com/license/free	http://www.w3.org/2000/svg
http://www.w3.org/1999/xlink	http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd
https://sketch.com	http://www.bohemiancoding.com/sketch
http://purl.org/dc/elements/1.1/	http://creativecommons.org/ns#
http://www.w3.org/1999/02/22-rdf-syntax-ns#	http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd
http://www.inkscape.org/namespaces/inkscape	http://purl.org/dc/dcmitype/StillImage
https://cdn.loom.com/assets/fonts/circular/CircularXXWeb-Book-cd7d2bcec649b1243839a15d5eb8f0a3.woff2	https://cdn.loom.com/assets/fonts/circular/CircularXXWeb-Medium-d74eac43c78bd5852478998ce63dceb3.woff2
https://cdn.loom.com/assets/fonts/circular/CircularXXWeb-Bold-83b8ceaf77f49c7cffa44107561909e4.woff2	https://cdn.loom.com/assets/fonts/circular/CircularXXWeb-Black-bf067ecb8aa777ceb6df7d72226febca.woff2
https://www.awesomescreenshot.com/pricing?from=	http://fb.me/use-check-prop-types
https://github.com/uuidjs/uuid#getrandomvalues-not-supported	https://github.com/aws/aws-sdk-js-v3#functionality-requiring-aws-common-runtime-crt
https://reactjs.org/docs/error-decoder.html?invariant=	http://www.w3.org/XML/1998/namespace
http://www.w3.org/1998/Math/MathML	http://www.w3.org/1999/xhtml
https://www.awesomescreenshot.com/signin	https://github.com/puleos/object-hash/issues/26
http://github.com/dominictarr/crypto-browserify	https://www.awesomescreenshot.com/my_items
https://www.awesomescreenshot.com/all_videos	https://www.awesomescreenshot.com/embed?id=
https://app.hubspot.com/email/	https://www.awesomescreenshot.com/signin?from=ext_pop_capture
http://jspdf.default.namespaceuri/	https://www.awesomescreenshot.com/api/v1
https://www.awesomescreenshot.com/pricing	https://id.atlassian.com/manage/shared-api-tokens
https://awesomescreenshot.s3.amazonaws.com/	https://www.awesomescreenshot.com/settings/connectedAccounts
https://www.googleapis.com/upload/drive/v3/files?uploadType=multipart&fields=id	https://www.googleapis.com/drive/v3/files/
https://drive.google.com/file/d/	https://content.dropboxapi.com/2/files/upload
https://www.dropbox.com/home	https://upload.box.com/api/2.0/files/content
https://app.box.com/file/	https://www.awesomescreenshot.com/
https://www.awesomescreenshot.com/image/	https://www.awesomescreenshot.com/promotion.json?t=
https://sider.ai/ad-land-redirect?source=as&p1=chrome&p2=topbar	https://sider.ai/ad-land-redirect?source=as&p1=chrome&p2=topbartext
https://www.awesomescreenshot.com/chatgpt-logo.png	https://chrome.google.com/webstore/detail/awesome-screenshot-screen/nlipoenfbbikpbjkfpfillcgkoblgpmj/reviews
https://www.vidline.com/promotion-card.html	https://www.awesomescreenshot.com/settings/
https://www.awesomescreenshot.com/web/user/logout	https://www.awesomescreenshot.com/signin?from=ext_loc_normal
https://www.awesomescreenshot.com/pricing?from=local_dropdown	https://www.awesomescreenshot.com
https://support.awesomescreenshot.com/hc/en-us	https://mail.google.com/mail
https://mail.google.com/sync	https://mail.google.com
https://mail.google.com/mail/u/0/	https://ssl.gstatic.com/ui/v1/icons/common/x_8px.png
https://api.inboxsdk.com/api/v2/errors	https://api.inboxsdk.com/api/v2/events/oauth
https://pubsub.googleapis.com/v1/projects/mailfoogae/topics/events:publish?key=	https://myaccount.google.
https://github.com/InboxSDK/InboxSDK/issues/1062#issuecomment-1821327292	https://www.gstatic.com/images/icons/material/system_gm/2x/more_vert_black_20dp.png
https://www.inboxsdk.com/docs/#Router	https://people-pa.clients6.google.com/
https://www.inboxsdk.com/register	https://www.gstatic.com/images/icons/material/system/1x/close_black_24dp.png
https://www.gstatic.com/images/icons/material/system/2x/close_black_24dp.png	https://ssl.gstatic.com/mail/sprites/smartmail-561acb673be75c1d374881a95997fce4.png

Page 1 of 2

Raw Manifest

{
  "name": "__MSG_extName__",
  "icons": {
    "16": "images/icon16.png",
    "32": "images/icon32.png",
    "48": "images/icon48.png",
    "128": "images/icon128.png"
  },
  "action": {
    "default_icon": {
      "19": "images/icon19.png",
      "38": "images/icon38.png"
    },
    "default_popup": "popup.html",
    "default_title": "__MSG_extName__"
  },
  "oauth2": {
    "scopes": [
      "profile",
      "email",
      "https://www.googleapis.com/auth/youtube",
      "https://www.googleapis.com/auth/drive"
    ],
    "client_id": "934696770472-c4k28j2t25p9fpntqsiblj12v8k8cob3.apps.googleusercontent.com"
  },
  "version": "4.4.41",
  "commands": {
    "4-record-tab": {
      "description": "__MSG_shortcuts_tab__"
    },
    "8-stop-record": {
      "description": "__MSG_shortcuts_stop__"
    },
    "7-pause-resume": {
      "description": "__MSG_shortcuts_pause_resume__"
    },
    "5-record-camera": {
      "description": "__MSG_shortcuts_camera__"
    },
    "6-record-custom": {
      "description": "__MSG_shortcuts_custom__"
    },
    "3-record-desktop": {
      "description": "__MSG_shortcuts_desktop__",
      "suggested_key": {
        "mac": "Alt+Shift+R",
        "default": "Alt+Shift+R"
      }
    },
    "1-capture-full-page": {
      "description": "__MSG_shortcuts_full_page__",
      "suggested_key": {
        "mac": "Alt+Shift+F",
        "default": "Alt+Shift+F"
      }
    },
    "annotate-local-page": {
      "description": "__MSG_upload__"
    },
    "0-capture-visible-area": {
      "description": "__MSG_shortcuts_visible__",
      "suggested_key": {
        "mac": "Alt+Shift+V",
        "default": "Alt+Shift+V"
      }
    },
    "2-capture-selected-area": {
      "description": "__MSG_shortcuts_selected__",
      "suggested_key": {
        "mac": "Alt+Shift+S",
        "default": "Alt+Shift+S"
      }
    }
  },
  "background": {
    "service_worker": "javascripts/bundles/serviceWorker.bundle.js"
  },
  "update_url": "https://clients2.google.com/service/update2/crx",
  "description": "__MSG_extDesc__",
  "permissions": [
    "tabs",
    "power",
    "storage",
    "unlimitedStorage",
    "desktopCapture",
    "tabCapture",
    "cookies",
    "activeTab",
    "contextMenus",
    "scripting",
    "offscreen",
    "alarms"
  ],
  "options_page": "option-react.html",
  "default_locale": "en",
  "content_scripts": [
    {
      "js": [
        "javascripts/libs/dragresize.js",
        "javascripts/bundles/content.bundle.js"
      ],
      "css": [
        "stylesheets/selected.css"
      ],
      "run_at": "document_end",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "all_frames": true,
      "exclude_globs": [
        "https://awesomescreenshot.com/save-local-flash/SaveToDisk.html"
      ],
      "match_about_blank": true,
      "match_origin_as_fallback": true
    },
    {
      "js": [
        "javascripts/bundles/content_record.bundle.js"
      ],
      "run_at": "document_end",
      "matches": [
        "http://*/*",
        "https://*/*"
      ],
      "exclude_globs": [
        "https://awesomescreenshot.com/save-local-flash/SaveToDisk.html"
      ]
    },
    {
      "js": [
        "javascripts/bundles/gmailContent.bundle.js"
      ],
      "run_at": "document_end",
      "matches": [
        "https://mail.google.com/*",
        "https://inbox.google.com/*"
      ]
    }
  ],
  "offline_enabled": true,
  "host_permissions": [
    "*://*.awesomescreenshot.com/",
    "<all_urls>"
  ],
  "manifest_version": 3,
  "optional_permissions": [
    "downloads"
  ],
  "externally_connectable": {
    "matches": [
      "https://*.awesomescreenshot.cn/*",
      "https://*.awesomescreenshot.com/*"
    ]
  },
  "content_security_policy": {
    "sandbox": "sandbox allow-scripts; script-src 'self' https://ssl.google-analytics.com https://www.google-analytics.com https://connect.facebook.net https://platform.twitter.com http://localhost:8097/; object-src 'self';  connect-src ws://localhost:8097",
    "extension_pages": "script-src 'self' 'wasm-unsafe-eval' ; object-src 'self'"
  },
  "web_accessible_resources": [
    {
      "matches": [
        "<all_urls>"
      ],
      "resources": [
        "images/success.gif",
        "images/clear.png",
        "images/icon19.png",
        "images/button_icon_cancel.png",
        "images/button_icon_cancel@2x.png",
        "images/button_icon_cancel_hover.png",
        "images/button_icon_cancel_hover@2x.png",
        "images/button_icon_capture.png",
        "images/button_icon_capture@2x.png",
        "images/button_icon_capture_hover.png",
        "images/button_icon_capture_hover@2x.png",
        "images/button_icon_copy@2x.png",
        "images/button_icon_copy.png",
        "images/video_toolbar/video_toolbar_ic.png",
        "images/video_toolbar/video_toolbar_ic@2x.png",
        "images/video_toolbar/brush_mouse_pen_ic.png",
        "images/video_toolbar/brush_mouse_pen_ic@2x.png",
        "images/video_toolbar/brush_mouse_box_ic.png",
        "images/video_toolbar/brush_mouse_box_ic@2x.png",
        "images/video_toolbar/brush_mouse_arrow_ic.png",
        "images/video_toolbar/brush_mouse_arrow_ic@2x.png",
        "images/video_toolbar/toolbar_clear_mouse_ic.png",
        "images/video_toolbar/toolbar_clear_mouse_ic@2x.png",
        "images/video_toolbar/toolbar_clear_mouse_hover_ic.png",
        "images/video_toolbar/toolbar_clear_mouse_hover_ic@2x.png",
        "images/annotate_icons.png",
        "images/annotate_icons@2x.png",
        "images/svg/windows-cursor.svg",
        "images/svg/cursor.svg",
        "images/svg/cursor-hand.svg",
        "images/svg/cursor-hand-black.svg",
        "images/svg/cursor-click.svg",
        "images/svg/smile.svg",
        "images/svg/cry.svg",
        "images/svg/tick-off.svg",
        "images/svg/cross.svg",
        "images/svg/forbidden.svg",
        "images/svg/warning.svg",
        "images/svg/q-mark.svg",
        "images/svg/like.svg",
        "images/svg/heart.svg",
        "images/svg/star.svg",
        "images/svg/chicken.svg",
        "images/svg/dog.svg",
        "images/svg/rain.svg",
        "images/svg/sun.svg",
        "images/svg/cloud.svg",
        "images/svg/thunder.svg",
        "images/svg/fish.svg",
        "images/svg/fish2.svg",
        "images/svg/tree1.svg",
        "images/svg/tree2.svg",
        "images/svg/building1.svg",
        "images/svg/building2.svg",
        "images/svg/package.svg",
        "images/svg/tent.svg",
        "images/svg/umbrella.svg",
        "images/svg/car.svg",
        "images/svg/basketball.svg",
        "images/svg/beer.svg",
        "camera.html",
        "camera-embed.html",
        "annotate-react.html",
        "images/svgIcons/ic_drag.svg",
        "images/svgIcons/ic_mute.svg",
        "images/svgIcons/ic_mic.svg",
        "images/svgIcons/ic_cam.svg",
        "images/svgIcons/ic_stop.svg",
        "images/svgIcons/ic_play.svg",
        "images/svgIcons/ic_pause.svg",
        "images/svgIcons/ic_no_cam.svg",
        "images/svgIcons/ic_show_ann.svg",
        "images/svgIcons/ic_trash.svg",
        "images/svgIcons/ic_hide_ann.svg",
        "images/svgIcons/ic_arrow_left.svg",
        "images/svgIcons/ic_close.svg",
        "/images/svgIcons/ic_crown.svg",
        "images/svgIcons/ic_sider_logo.svg",
        "images/svgIcons/five_star.svg",
        "images/svgIcons/ic_cup.svg",
        "images/svgIcons/ic_store.svg",
        "images/svgIcons/chrome.svg",
        "images/svgIcons/ic_height.svg",
        "images/svgIcons/ic_width.svg",
        "/images/ic_sider.png",
        "/images/ic_sider@2x.png"
      ]
    }
  ]
}

by ✦ Astarte

Awesome Screen Recorder & Screenshot

Extension Details

Context-Aware Verdict

Findings

Security Analysis Details

Required Permissions:

Optional Permissions:

Host Permissions:

Content Security Policy:

Embedded URLs (127 total):

Raw Manifest

Detections

Manifest Findings