降温信号未识别到付费功能中风险权限组合

Recon Buddy

Extract recon data like JWTs, API keys, parameters, and endpoints from visited pages.

用户数359当前公开安装规模

评分5.0商店平均评分

评论数5公开评论体量

Manifest 版本V3插件平台版本

7日增长-3近 7 天净增用户

7日增长率-0.83%相对周增长速度

视觉预览

Recon Buddy 媒体预览

3 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

5.00

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长增长

+2+0.56%

7日增长减少

-3-0.83%

30日增长减少

-9-2.45%

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本1.0

ManifestV3

大小110KiB

语言数1English

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

Recon-Buddy is a powerful Chrome extension designed for bug bounty hunters, penetration testers, and security researchers. It streamlines passive reconnaissance by automatically extracting sensitive data and valuable recon artifacts from every page you visit. From hidden endpoints and API keys to misconfigured secrets, Recon-Buddy gives you the edge in uncovering potential attack surfaces with speed and precision.

Follow our updates:

🐦 Twitter: https://x.com/choudhary_1337

📷 Instagram: https://instagram.com/m.r_choudhary_69

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

Endpoint Extractor

开发者工具 / Developer Tools

Extracts endpoints from the current page.

NavSec Vulnerability Scanner

隐私与安全 / Privacy & Security

Comprehensive security scanner with advanced XSS detection, API security analysis, and authentication testing

LPR - Ultimate Recon & Bug Hunting Tool

开发者工具 / Developer Tools

Stop manually searching source code. Start hunting. LPR (Live Params & Redirects) is an all-in-one reconnaissance and…

JS Recon Buddy

隐私与安全 / Privacy & Security

Analyze page scripts for bug bounty reconnaissance.

DIRFOX - Endpoint Fuzzer for Pentesters

工具 / Tools

Fuzz endpoints using custom or GitHub-hosted wordlists. Built for security researchers and pentesters.

CyberPost Lab

工具 / Tools

A fully offline, browser-based HTTP request testing tool for cybersecurity researchers

AI 产品解读

Passive reconnaissance data extraction from web pages

Helps security researchers and bug bounty hunters quickly identify sensitive data (API keys, JWTs, tokens, endpoints) exposed on web pages without manual inspection.

User visits a target page, opens the extension popup, optionally enables DOM/JS/Source Map scan toggles, clicks 'Scan Page', reviews extracted recon data in the output panel, and optionally downloads the results.

目标用户: Bug bounty hunters / Penetration testers / Security researchers

Analysis is based on static source code only; runtime behavior (e.g., external API calls not visible in static analysis) cannot be fully verified. The extension only uses chrome.scripting and fetch for local source maps, so no external data exfiltration is evident.

付费分析

未识别到付费功能

No paid features, subscription, or billing logic found. The extension is entirely free with all scanning features (DOM, JS, source map) available without gating. The keyword 'pro' in verified_contents.json is part of Chrome Web Store metadata, not extension code.

置信度: 100
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension performs local scanning of the current page via chrome.scripting.executeScript. No login UI, account creation, or authentication flow exists in popup.html or popup.js. The core workflow (scan page, download output) is fully usable without any account.

权限风险

中风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：scripting、activeTab

发布者

Kishan Lal Choudhary

独立发布者

邮箱: [email protected]
电话: --
地址: --

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Recon Buddy

Recon Buddy 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

Endpoint Extractor

NavSec Vulnerability Scanner

LPR - Ultimate Recon & Bug Hunting Tool

JS Recon Buddy

DIRFOX - Endpoint Fuzzer for Pentesters

CyberPost Lab