Skip to content

MDAA - AI Security Assistant v1.0.0: Initial Launch

Latest
Latest

Choose a tag to compare

View all tags
@ThemeHackers ThemeHackers released this 29 Oct 04:31
· 7 commits to main since this release
v1.0.0
3fc6a8d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

MDAA - AI Security Assistant v1.0.0: Initial Launch

✨ Release Description

This is the initial Version 1.0.0 launch of the MDAA (Malware Deconstructor AI Agent) extension, bringing expert-level cybersecurity assistance directly into your browser.

Key Features in Version 1.0.0:

1. AI Chat and Content Analysis

  • Malware Deconstructor AI Agent: The AI assistant is configured with a strict system persona to be a professional, precise, and collaborative colleague for malware analysts and cybersecurity researchers.
  • On-Page Analysis: Use the Gemini AI to summarize key security-related takeaways or extract Indicators of Compromise (IoCs) from the content of the current tab or your selected text.
  • Context Menu Integration: Right-click on selected text, a link, or a page to quickly send the context directly to the AI Chat or Quick Check tabs.
  • Chat History Management: Supports saving chat history persistently (Local Storage) or session-only (Session Storage), with functionality to archive and load past chat sessions.

2. Quick IoC Check

  • Smart IoC Analysis: Analyze multiple IoCs (IP, Domain, Hash, URL) simultaneously in a single input.
  • Integrated Threat Intelligence: Check IoCs using popular threat intelligence platforms:
    • VirusTotal: For Hashes, Domains, URLs, and IPv4 addresses.
    • AbuseIPDB: For IPv4 addresses.
    • Shodan: For IPv4 addresses (retrieving OS, ISP, and open Ports).
  • AI Summarization: A dedicated button to have the AI summarize the combined Quick Check results for fast interpretation.

3. Security and Key Management

  • Strong Encryption: All API Keys are encrypted before storage in chrome.storage.local using AES-GCM 256-bit.
  • Password-Derived Keys: The encryption key is derived using PBKDF2 SHA-256 with 250,000 iterations for strong password protection.
  • Session-Only Keys: Keys are decrypted and held only in session memory (chrome.storage.session) for the current browsing session and are automatically cleared when the browser is closed.
  • Web App Sync: A secure, externally connectable mechanism is provided to transfer an encrypted key set from the dedicated MDAA web app to the extension.
  • Lockdown when password is wrong: When the user enters the wrong password, there is a security protection system.
Assets 3
Loading