Created
June 19, 2020 08:14
-
-
Save keng42/1c9d921e549470da34b0fa767fecaef5 to your computer and use it in GitHub Desktop.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| // https://awakesecurity.com/wp-content/uploads/2020/06/GalComm-Malicious-Chrome-Extensions-Appendix-B.txt | |
| malicious = [ | |
| "acmnokigkgihogfbeooklgemindnbine", | |
| "apgohnlmnmkblgfplgnlmkjcpocgfomp", | |
| "apjnadhmhgdobcdanndaphcpmnjbnfng", | |
| "bahkljhhdeciiaodlkppoonappfnheoi", | |
| "bannaglhmenocdjcmlkhkcciioaepfpj", | |
| "bgffinjklipdhacmidehoncomokcmjmh", | |
| "bifdhahddjbdbjmiekcnmeiffabcfjgh", | |
| "bjpknhldlbknoidifkjnnkpginjgkgnm", | |
| "blngdeeenccpfjbkolalandfmiinhkak", | |
| "ccdfhjebekpopcelcfkpgagbehppkadi", | |
| "cceejgojinihpakmciijfdgafhpchigo", | |
| "cebjhmljaodmgmcaecenghhikkjdfabo", | |
| "chbpnonhcgdbcpicacolalkgjlcjkbbd", | |
| "cifafogcmckphmnbeipgkpfbjphmajbc", | |
| "clopbiaijcfolfmjebjinippgmdkkppj", | |
| "cpgoblgcfemdmaolmfhpoifikehgbjbf", | |
| "dcmjopnlojhkngkmagminjbiahokmfig", | |
| "deiiiklocnibjflinkfmefpofgcfhdga", | |
| "dipecofobdcjnpffbkmfkdbfmjfjfgmn", | |
| "dopkmmcoegcjggfanajnindneifffpck", | |
| "dopmojabcdlfbnppmjeaajclohofnbol", | |
| "edcepmkpdojmciieeijebkodahjfliif", | |
| "ekbecnhekcpbfgdchfjcfmnocdfpcanj", | |
| "elflophcopcglipligoibfejllmndhmp", | |
| "eogfeijdemimhpfhlpjoifeckijeejkc", | |
| "fcobokliblbalmjmahdebcdalglnieii", | |
| "fgafnjobnempajahhgebbbpkpegcdlbf", | |
| "fgcomdacecoimaejookmlcfogngmfmli", | |
| "fgmeppijnhhafacemgoocgelcflipnfd", | |
| "fhanjgcjamaagccdkanegeefdpdkeban", | |
| "flfkimeelfnpapcgmobfgfifhackkend", | |
| "fmahbaepkpdimfcjpopjklankbbhdobk", | |
| "foebfmkeamadbhjcdglihfijdaohomlm", | |
| "fpngnlpmkfkhodklbljnncdcmkiopide", | |
| "gdifegeihkihjbkkgdijkcpkjekoicbl", | |
| "gfcmbgjehfhemioddkpcipehdfnjmief", | |
| "gfdefkjpjdbiiclhimebabkmclmiiegk", | |
| "ggijmaajgdkdijomfipnpdfijcnodpip", | |
| "ghgjhnkjohlnmngbniijbkidigifekaa", | |
| "gllihgnfnbpdmnppfjdlkciijkddfohn", | |
| "gmmohhcojdhgbjjahhpkfhbapgcfgfne", | |
| "gofhadkfcffpjdbonbladicjdbkpickk", | |
| "hapicipmkalhnklammmfdblkngahelln", | |
| "hijipblimhboccjcnnjnjelcdmceeafa", | |
| "hmamdkecijcegebmhndhcihjjkndbjgk", | |
| "hodfejbmfdhcgolcglcojkpfdjjdepji", | |
| "hpfijbjnmddglpmogpaeofdbehkpball", | |
| "ianfonfnhjeidghdegbkbbjgliiciiic", | |
| "ibfjiddieiljjjccjemgnoopkpmpniej", | |
| "inhdgbalcopmbpjfincjponejamhaeop", | |
| "iondldgmpaoekbgabgconiajpbkebkin", | |
| "ipagcbjbgailmjeaojmpiddflpbgjngl", | |
| "jagbooldjnemiedoagckjomjegkopfno", | |
| "jdheollkkpfglhohnpgkonecdealeebn", | |
| "jfefcmidfkpncdkjkkghhmjkafanhiam", | |
| "jfgkpeobcmjlocjpfgocelimhppdmigj", | |
| "jghiljaagglmcdeopnjkfhcikjnddhhc", | |
| "jgjakaebbliafihodjhpkpankimhckdf", | |
| "jiiinmeiedloeiabcgkdcbbpfelmbaff", | |
| "jkdngiblfdmfjhiahibnnhcjncehcgab", | |
| "jkofpdjclecgjcfomkaajhhmmhnninia", | |
| "kbdbmddhlgckaggdapibpihadohhelao", | |
| "keceijnpfmmlnebgnkhojinbkopolaom", | |
| "khhemdcdllgomlbleegjdpbeflgbomcj", | |
| "kjdcopljcgiekkmjhinmcpioncofoclg", | |
| "kjgaljeofmfgjfipajjeeflbknekghma", | |
| "labpefoeghdmpbfijhnnejdmnjccgplc", | |
| "lameokaalbmnhgapanlloeichlbjloak", | |
| "lbeekfefglldjjenkaekhnogoplpmfin", | |
| "lbhddhdfbcdcfbbbmimncbakkjobaedh", | |
| "ldoiiiffclpggehajofeffljablcodif", | |
| "lhjdepbplpkgmghgiphdjpnagpmhijbg", | |
| "ljddilebjpmmomoppeemckhpilhmoaok", | |
| "ljnfpiodfojmjfbiechgkbkhikfbknjc", | |
| "lnedcnepmplnjmfdiclhbfhneconamoj", | |
| "lnlkgfpceclfhomgocnnenmadlhanghf", | |
| "loigeafmbglngofpkkddgobapkkcaena", | |
| "lpajppfbbiafpmbeompbinpigbemekcg", | |
| "majekhlfhmeeplofdolkddbecmgjgplm", | |
| "mapafdeimlgplbahigmhneiibemhgcnc", | |
| "mcfeaailfhmpdphgnheboncfiikfkenn", | |
| "mgkjakldpclhkfadefnoncnjkiaffpkp", | |
| "mhinpnedhapjlbgnhcifjdkklbeefbpa", | |
| "mihiainclhehjnklijgpokdpldjmjdap", | |
| "mmkakbkmcnchdopphcbphjioggaanmim", | |
| "mopkkgobjofbkkgemcidkndbglkcfhjj", | |
| "mpifmhgignilkmeckejgamolchmgfdom", | |
| "nabmpeienmkmicpjckkgihobgleppbkc", | |
| "nahhmpbckpgdidfnmfkfgiflpjijilce", | |
| "ncepfbpjhkahgdemgmjmcgbgnfdinnhk", | |
| "npaklgbiblcbpokaiddpmmbknncnbljb", | |
| "npdfkclmbnoklkdebjfodpendkepbjek", | |
| "nplenkhhmalidgamfdejkblbaihndkcm", | |
| "oalfdomffplbcimjikgaklfamodahpmi", | |
| "odnakbaioopckimfnkllgijmkikhfhhf", | |
| "oklejhdbgggnfaggiidiaokelehcfjdp", | |
| "omgeapkgiddakeoklcapboapbamdgmhp", | |
| "oonbcpdabjcggcklopgbdagbfnkhbgbe", | |
| "opahibnipmkjincplepgjiiinbfmppmh", | |
| "pamchlfnkebmjbfbknoclehcpfclbhpl", | |
| "pcfapghfanllmbdfiipeiihpkojekckk", | |
| "pchfjdkempbhcjdifpfphmgdmnmadgce", | |
| "pdpcpceofkopegffcdnffeenbfdldock", | |
| "pgahbiaijngfmbbijfgmchcnkipajgha", | |
| "pidohlmjfgjbafgfleommlolmbjdcpal", | |
| "pilplloabdedfmialnfchjomjmpjcoej", | |
| "pklmnoldkkoholegljdkibjjhmegpjep", | |
| "pknkncdfjlncijifekldbjmeaiakdbof", | |
| "plmgefkiicjfchonlmnbabfebpnpckkk", | |
| "pnciakodcdnehobpfcjcnnlcpmjlpkac", | |
| "ponodoigcmkglddlljanchegmkgkhmgb", | |
| ]; | |
| document | |
| .querySelector("extensions-manager") | |
| .shadowRoot.querySelector("cr-view-manager extensions-item-list") | |
| .shadowRoot.querySelectorAll("extensions-item") | |
| .forEach((item) => { | |
| const name = item.shadowRoot.querySelector("#name").innerText; | |
| if (malicious.includes(item.id)) { | |
| console.log("❌", item.id, name); | |
| } else { | |
| console.log("✅", item.id, name); | |
| } | |
| }); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment