Additivos del navigator Firefox
  • Extensiones
  • Themas
    • pro Firefox
    • Dictionarios e pacchettos de lingua
    • Altere sitos de navigatores
    • Additivos pro Android
Aperir session
Vista preliminar de JSXtract

JSXtract per Device1

JSXtract is a security research tool used to pull various type of data from JS files that exist within a selected tab.

0 (0 revisiones)0 (0 revisiones)
Nulle usatoresNulle usatores
Discarga Firefox installa le extension
Discargar file

Metadatos del extension

A proposito de iste extension
This tool is a great way to get an initial look on what may exist within the application. You can use the tool to get some basic data such as urls, endpoints and parameters or get a good initial look of sinks, postmessages and then go deeper from there etc.

How it's used
- First the user should open dev tools and check which domains the JS files of the application are from i.e. netflix uses nflxext.com, in which case you'd place something like "nflx" into the whitelist input (this input is comma separated array i.e. nflx,netflix), which will then get all JS files from sources which include "nflx" in them. The whitelist was created to separate thirdparty JS from the applications JS files.
- Second you'd press start and a new tab called "results" opens up in your browser which allows you to see the data which we're found through various regex.

Results
- Urls
- Endpoints
- Parameters
- Sinks (various sinks with a bit of context)
- PostMessages (These also have a bit of context)
- Misc. (These are values of .get() & .set() with some context)

The regex used
Urls: > /https?:\/\/[a-zA-Z0-9.-_\/\${}:]+/g

Endpoints: > /(?<=[\"\'])\/[a-zA-Z0-9-._\/\${}:]{2,}/g

Parameters: > /(?<=\?)[a-zA-Z0-9-_]{2,}(?==)/g

Misc.: > /[()[]{}\w]{0,20}.[sg]et([\"\'][^\"\']+[\"\'][^)]*)/g

Sinks: > /document.(write(ln)([^)]+)|domain\s?=\s?[^;)]}]{1,300})|.(innerHTML|outerHTML|insertAdjacentHTML|onevent|srcdoc)\s?[=]\s?[^;]{1,300};|dangerouslySetInnerHTML[=:]\s?{?[^;}]{1,300}[;}]|location.(host|hostname|href|pathname|search|protocol)\s?=[^;]{1,300};|location.(assign(|replace()[^)]{1,300})|document.cookie\s?=\s?[^;]{1,300};|(eval(uate)?|execCommand|execScript)([^)]+)|.(href|src|action)\s?=\s?[^;]{1,300};|FileReader.(readAsArrayBuffer|readAsBinaryString|readAsDataURL|readAsText|readAsFile|root.getFile)([^)]{1,300})/g

PostMessages: > /postMessage(.{1,300});|addEventListener([\'\"]message[\'\"].{1,300});/g

Github
https://github.com/Antp1k/jsxtract/
Valutate 0 per 0 revisores
Aperi session pro evalutar iste extension
Il ha non ha ancora evalutationes

Evalutation de stellas salvate

5
0
4
0
3
0
2
0
1
0
Ancora nulle recensiones
Permissiones e datosSaper plus

Permissiones necessari:

  • Accede al schedas del navigator

Permissiones optional:

  • Acceder a tu datos pro tote le sitos web
Plus de informationes
Version
1.0
Dimension
10,96 KB
Ultime actualisation
5 luni în urmă (4 mai 2025)
Categorias associate
  • Confidentialitate & securitate
Licentia
Licentia MIT
Historia de versiones
  • Vide tote le versiones
Adder al collection
Reporta iste additivo
Ir al pagina principal de Mozilla

Additivos

  • A proposito
  • Blog del additivos de Firefox
  • Laboratorio de extensiones
  • Centro de disveloppatores
  • Politicas pro disveloppatores
  • Blog del communitate
  • Foro
  • Reportar un defecto
  • Guida al revision

Navigatores

  • Desktop
  • Mobile
  • Enterprise

Productos

  • Browsers
  • VPN
  • Relay
  • Monitor
  • Pocket
  • Bluesky (@firefox.com)
  • Instagram (Firefox)
  • YouTube (firefoxchannel)
  • Confidentialitate
  • Cookies
  • Legal

Excepte ubi alteremente indicate, le contento de iste sito es publicate sub licentia Creative Commons Attribution Share-Alike v3.0 o qualcunque version plus recente.