Created
June 19, 2020 08:14
-
-
Save keng42/1c9d921e549470da34b0fa767fecaef5 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// https://awakesecurity.com/wp-content/uploads/2020/06/GalComm-Malicious-Chrome-Extensions-Appendix-B.txt | |
malicious = [ | |
"acmnokigkgihogfbeooklgemindnbine", | |
"apgohnlmnmkblgfplgnlmkjcpocgfomp", | |
"apjnadhmhgdobcdanndaphcpmnjbnfng", | |
"bahkljhhdeciiaodlkppoonappfnheoi", | |
"bannaglhmenocdjcmlkhkcciioaepfpj", | |
"bgffinjklipdhacmidehoncomokcmjmh", | |
"bifdhahddjbdbjmiekcnmeiffabcfjgh", | |
"bjpknhldlbknoidifkjnnkpginjgkgnm", | |
"blngdeeenccpfjbkolalandfmiinhkak", | |
"ccdfhjebekpopcelcfkpgagbehppkadi", | |
"cceejgojinihpakmciijfdgafhpchigo", | |
"cebjhmljaodmgmcaecenghhikkjdfabo", | |
"chbpnonhcgdbcpicacolalkgjlcjkbbd", | |
"cifafogcmckphmnbeipgkpfbjphmajbc", | |
"clopbiaijcfolfmjebjinippgmdkkppj", | |
"cpgoblgcfemdmaolmfhpoifikehgbjbf", | |
"dcmjopnlojhkngkmagminjbiahokmfig", | |
"deiiiklocnibjflinkfmefpofgcfhdga", | |
"dipecofobdcjnpffbkmfkdbfmjfjfgmn", | |
"dopkmmcoegcjggfanajnindneifffpck", | |
"dopmojabcdlfbnppmjeaajclohofnbol", | |
"edcepmkpdojmciieeijebkodahjfliif", | |
"ekbecnhekcpbfgdchfjcfmnocdfpcanj", | |
"elflophcopcglipligoibfejllmndhmp", | |
"eogfeijdemimhpfhlpjoifeckijeejkc", | |
"fcobokliblbalmjmahdebcdalglnieii", | |
"fgafnjobnempajahhgebbbpkpegcdlbf", | |
"fgcomdacecoimaejookmlcfogngmfmli", | |
"fgmeppijnhhafacemgoocgelcflipnfd", | |
"fhanjgcjamaagccdkanegeefdpdkeban", | |
"flfkimeelfnpapcgmobfgfifhackkend", | |
"fmahbaepkpdimfcjpopjklankbbhdobk", | |
"foebfmkeamadbhjcdglihfijdaohomlm", | |
"fpngnlpmkfkhodklbljnncdcmkiopide", | |
"gdifegeihkihjbkkgdijkcpkjekoicbl", | |
"gfcmbgjehfhemioddkpcipehdfnjmief", | |
"gfdefkjpjdbiiclhimebabkmclmiiegk", | |
"ggijmaajgdkdijomfipnpdfijcnodpip", | |
"ghgjhnkjohlnmngbniijbkidigifekaa", | |
"gllihgnfnbpdmnppfjdlkciijkddfohn", | |
"gmmohhcojdhgbjjahhpkfhbapgcfgfne", | |
"gofhadkfcffpjdbonbladicjdbkpickk", | |
"hapicipmkalhnklammmfdblkngahelln", | |
"hijipblimhboccjcnnjnjelcdmceeafa", | |
"hmamdkecijcegebmhndhcihjjkndbjgk", | |
"hodfejbmfdhcgolcglcojkpfdjjdepji", | |
"hpfijbjnmddglpmogpaeofdbehkpball", | |
"ianfonfnhjeidghdegbkbbjgliiciiic", | |
"ibfjiddieiljjjccjemgnoopkpmpniej", | |
"inhdgbalcopmbpjfincjponejamhaeop", | |
"iondldgmpaoekbgabgconiajpbkebkin", | |
"ipagcbjbgailmjeaojmpiddflpbgjngl", | |
"jagbooldjnemiedoagckjomjegkopfno", | |
"jdheollkkpfglhohnpgkonecdealeebn", | |
"jfefcmidfkpncdkjkkghhmjkafanhiam", | |
"jfgkpeobcmjlocjpfgocelimhppdmigj", | |
"jghiljaagglmcdeopnjkfhcikjnddhhc", | |
"jgjakaebbliafihodjhpkpankimhckdf", | |
"jiiinmeiedloeiabcgkdcbbpfelmbaff", | |
"jkdngiblfdmfjhiahibnnhcjncehcgab", | |
"jkofpdjclecgjcfomkaajhhmmhnninia", | |
"kbdbmddhlgckaggdapibpihadohhelao", | |
"keceijnpfmmlnebgnkhojinbkopolaom", | |
"khhemdcdllgomlbleegjdpbeflgbomcj", | |
"kjdcopljcgiekkmjhinmcpioncofoclg", | |
"kjgaljeofmfgjfipajjeeflbknekghma", | |
"labpefoeghdmpbfijhnnejdmnjccgplc", | |
"lameokaalbmnhgapanlloeichlbjloak", | |
"lbeekfefglldjjenkaekhnogoplpmfin", | |
"lbhddhdfbcdcfbbbmimncbakkjobaedh", | |
"ldoiiiffclpggehajofeffljablcodif", | |
"lhjdepbplpkgmghgiphdjpnagpmhijbg", | |
"ljddilebjpmmomoppeemckhpilhmoaok", | |
"ljnfpiodfojmjfbiechgkbkhikfbknjc", | |
"lnedcnepmplnjmfdiclhbfhneconamoj", | |
"lnlkgfpceclfhomgocnnenmadlhanghf", | |
"loigeafmbglngofpkkddgobapkkcaena", | |
"lpajppfbbiafpmbeompbinpigbemekcg", | |
"majekhlfhmeeplofdolkddbecmgjgplm", | |
"mapafdeimlgplbahigmhneiibemhgcnc", | |
"mcfeaailfhmpdphgnheboncfiikfkenn", | |
"mgkjakldpclhkfadefnoncnjkiaffpkp", | |
"mhinpnedhapjlbgnhcifjdkklbeefbpa", | |
"mihiainclhehjnklijgpokdpldjmjdap", | |
"mmkakbkmcnchdopphcbphjioggaanmim", | |
"mopkkgobjofbkkgemcidkndbglkcfhjj", | |
"mpifmhgignilkmeckejgamolchmgfdom", | |
"nabmpeienmkmicpjckkgihobgleppbkc", | |
"nahhmpbckpgdidfnmfkfgiflpjijilce", | |
"ncepfbpjhkahgdemgmjmcgbgnfdinnhk", | |
"npaklgbiblcbpokaiddpmmbknncnbljb", | |
"npdfkclmbnoklkdebjfodpendkepbjek", | |
"nplenkhhmalidgamfdejkblbaihndkcm", | |
"oalfdomffplbcimjikgaklfamodahpmi", | |
"odnakbaioopckimfnkllgijmkikhfhhf", | |
"oklejhdbgggnfaggiidiaokelehcfjdp", | |
"omgeapkgiddakeoklcapboapbamdgmhp", | |
"oonbcpdabjcggcklopgbdagbfnkhbgbe", | |
"opahibnipmkjincplepgjiiinbfmppmh", | |
"pamchlfnkebmjbfbknoclehcpfclbhpl", | |
"pcfapghfanllmbdfiipeiihpkojekckk", | |
"pchfjdkempbhcjdifpfphmgdmnmadgce", | |
"pdpcpceofkopegffcdnffeenbfdldock", | |
"pgahbiaijngfmbbijfgmchcnkipajgha", | |
"pidohlmjfgjbafgfleommlolmbjdcpal", | |
"pilplloabdedfmialnfchjomjmpjcoej", | |
"pklmnoldkkoholegljdkibjjhmegpjep", | |
"pknkncdfjlncijifekldbjmeaiakdbof", | |
"plmgefkiicjfchonlmnbabfebpnpckkk", | |
"pnciakodcdnehobpfcjcnnlcpmjlpkac", | |
"ponodoigcmkglddlljanchegmkgkhmgb", | |
]; | |
document | |
.querySelector("extensions-manager") | |
.shadowRoot.querySelector("cr-view-manager extensions-item-list") | |
.shadowRoot.querySelectorAll("extensions-item") | |
.forEach((item) => { | |
const name = item.shadowRoot.querySelector("#name").innerText; | |
if (malicious.includes(item.id)) { | |
console.log("❌", item.id, name); | |
} else { | |
console.log("✅", item.id, name); | |
} | |
}); |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment