WooodHead

Chrome ExtensionのLive HTTP Headersを調査した。Firefox用のものではない。Firefox用のものではない。

https://chrome.google.com/webstore/detail/live-http-headers/iaiioopjkcekapmldfgbebdclcnpgnlo

11/7追記

類似 or 同様の方法で難読化scriptを埋め込んでいる拡張機能が大量にあったため、Googleに報告済み。
https://twitter.com/bulkneets/status/795260268221636608

English version: https://translate.google.com/translate?sl=ja&tl=en&js=y&prev=_t&hl=ja&ie=UTF-8&u=https%3A%2F%2Fgist.github.com%2Fmala%2Fe87973df5029d96c9269d9431fcef5cb&edit-text=&act=url

Summary in english.

Option 1: Command-line download extension as zip and extract

extension_id=jifpbeccnghkjeaalbbjmodiffmgedin   # change this ID
curl -L -o "$extension_id.zip" "https://clients2.google.com/service/update2/crx?response=redirect&os=mac&arch=x86-64&nacl_arch=x86-64&prod=chromecrx&prodchannel=stable&prodversion=44.0.2403.130&x=id%3D$extension_id%26uc" 
unzip -d "$extension_id-source" "$extension_id.zip"

Thx to crxviewer for the magic download URL.

Effective Engineer - Notes

By Edmond Lau
Highly Recommended 👍
http://www.theeffectiveengineer.com/

What's an Effective Engineer?

They are the people who get things done. Effective Engineers produce results.

	# crawler.py
	# Python 2.7.6


	"""
	Crawl a page and extract all urls recursively within same domain
	"""


	from BeautifulSoup import BeautifulSoup

	''' scrapes a website for urls '''

	import requests
	from bs4 import BeautifulSoup


	class URLTest():
	def __init__(self, link, status_code, current_depth, head):
	self.link = link
	self.status_code = status_code

	# source: https://trac.ffmpeg.org/wiki/CentosCompilationGuide

	yum install autoconf automake gcc gcc-c++ git libtool make nasm pkgconfig zlib-devel

	mkdir ~/ffmpeg_sources

	cd ~/ffmpeg_sources
	curl -O http://www.tortall.net/projects/yasm/releases/yasm-1.2.0.tar.gz
	tar xzvf yasm-1.2.0.tar.gz
	cd yasm-1.2.0

	var jsdom = require('jsdom'),
	request = require('request'),
	url = require('url'),
	npm = require("npm"),
	redis = require("redis");

	var client = redis.createClient();

	var configObject = {
	"dev": false,

	var request = require('request'),
	cheerio = require('cheerio'),
	async = require('async');

	var base = 'https://www.npmjs.org',
	concurrency = 2;

	var q = async.queue(function(task, next) {
	setTimeout(function() {
	console.log('GET ' + task.url);

	var parser = document.createElement('a');
	parser.href = "http://example.com:3000/pathname/?search=test#hash";

	parser.protocol; // => "http:"
	parser.hostname; // => "example.com"
	parser.port; // => "3000"
	parser.pathname; // => "/pathname/"
	parser.search; // => "?search=test"
	parser.hash; // => "#hash"
	parser.host; // => "example.com:3000"

WooodHead

Option 1: Command-line download extension as zip and extract

Effective Engineer - Notes

What's an Effective Engineer?

Adopt the Right Mindsets