ChromeAudit

Nuclei plugins to audit Chrome extensions

Download the Chrome Extension as a ZIP file. In case you can only find a CRX file, rename it with the extension .zip.
Unzip the downloaded file to access its contents.
Execute the Nuclei tool with the following command:

nuclei -target /chrome-ext -t ./templates

Replace /chrome-ext with the path to the unzipped extension's files.

Name		Name	Last commit message	Last commit date
Latest commit History 11 Commits
README.md		README.md
avoid-document-write-innerhtml.yaml		avoid-document-write-innerhtml.yaml
avoid-http-usage.yaml		avoid-http-usage.yaml
cross-origin-fetch.yaml		cross-origin-fetch.yaml
externally-connectable.yaml		externally-connectable.yaml
missing-csp.yaml		missing-csp.yaml
register-sanitize-inputs.yaml		register-sanitize-inputs.yaml
use-content-scripts-carefully.yaml		use-content-scripts-carefully.yaml
web-accessible-resources.yaml		web-accessible-resources.yaml
wildcard-in-manifest.yaml		wildcard-in-manifest.yaml

Provide feedback