Skip to content

Download Chromium extensions on the commandline and optionally dump their ZIP file

License

Notifications You must be signed in to change notification settings

ETHZ-IT-SeC/crx-forensic-download-helper

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 
 
 
 
 

Repository files navigation

Forensic Chrome Extension Download Helper

Synopsis

download-crx.pl [--zip|-z] <extension id or extension URL> […]
download-crx.pl [--extract|-x] <file> […]

Description

This little helper tool downloads .crx files from the Google Chrome Webstore from the commandline and optionally dumps the contained ZIP archive (i.e. strips the CRX binary headers).

Supported are the version 2 and version 3 of the CRX file format.

It was written for the purpose of downloading Google Chrome Extensions outside the browser and making it available in a format easy to handle for forensic analyses.

Parameters

The script requires one or more parameters, which can be either:

  • An extension ID,
  • A Google Chrome Webstore Extension URL,
  • A local file in CRX format.

If given an extension ID or a Google Chrome Webstore Extension URL, it will fetch that extension's CRX file from the Google Chrome Webstore.

If given an existing local file, it will only dump the contained ZIP archive.

Options

  • -z, --zip: Also dump the contained ZIP archive.

  • -x, --extract: Take the parameter as file name of a CRX format file and dump its contained ZIP archive. (This is only necessary if the file name also looks like an extension ID. Otherwise the tool will detect existing files itself.)

Dependencies / Requirements

This tool is written in (modern) Perl and only requires …

  • a single Perl module as dependency (Mojolicious) and …

  • at least Perl 5.16 (a requirement of the current version of Mojolicious as of this writing).

Credits

Author, Copyright and License

Author

This software was written by Axel Beckert [email protected].

Copyright

2022 Axel Beckert
2022 ETH Zürich IT Security Center

License

Permission to use, copy, modify, and/or distribute this software for any purpose with or without fee is hereby granted, provided that the above copyright notice and this permission notice appear in all copies.

THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.

(This is the ISC License.)