稳定信号未识别到付费功能中风险权限组合

Shodan

The Shodan plugin tells you where the website is hosted (country, city), who owns the IP and what other services/ ports are open.

用户数100K当前公开安装规模

评分4.5商店平均评分

评论数141公开评论体量

Manifest 版本V3插件平台版本

7日增长0近 7 天净增用户

7日增长率0%相对周增长速度

视觉预览

Shodan 媒体预览

3 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

4.55

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长暂无数据

----

7日增长持平

00%

30日增长暂无数据

----

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本2.0.0

ManifestV3

大小29.01KiB

语言数1English (United States)

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

The Shodan plugin for Chrome automatically checks whether Shodan has any information for the current website. Is the website also running FTP, DNS, SSH or some unusual service? With this plugin you can see all the info that Shodan has collected on a given website/ domain.

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

Hack-Tools

开发者工具 / Developer Tools

疑似付费置信度 88平台 PayPal

The all in one Red team extension for web pentester

Vulners Web Scanner

工作流程与规划 / Workflow & Planning

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

OWASP Penetration Testing Kit

开发者工具 / Developer Tools

OWASP Penetration Testing Kit

HackBar

开发者工具 / Developer Tools

疑似付费置信度 92平台 Stripe

A browser extension for Penetration Testing

Sputnik

OSINT web extension

Pulsedive Threat Intelligence

工具 / Tools

Highlight IPs, domains, and URLs on any website to enrich them using Pulsedive's threat intelligence.

AI 产品解读

Displays real-time network infrastructure information about any website the user visits, including hosting location, IP address, open ports, and known vulnerabilities

Provides instant visibility into a website's underlying infrastructure (hosting country/city, IP ownership, open services/ports, security vulnerabilities) without leaving the browser or manually querying Shodan

Extension runs as a background service worker that intercepts tab URL changes. For each HTTP(S) page, it resolves the hostname to IP via geonet.shodan.io, then queries internetdb.shodan.io for host details. Results are cached in memory. When the user clicks the extension icon, a popup renders the cached data as a table (IP, hostname, country, city, OS, org, tags, vulns) plus a ports list. Context menus allow searching shodan.io directly for a link, page, or text selection.

目标用户: Security researchers and penetration testers / Network administrators / Privacy-conscious users wanting to know where sites are hosted / IT professionals investigating website infrastructure

Shodan.io destination service does have paid API credits and membership tiers, but the extension only uses the free public endpoints
The extension has host_permissions for api.shodan.io in the manifest but no code actually calls it - possibly reserved for future use or unused

付费分析

未识别到付费功能

No payment UI, subscription checks, premium gating, or billing-related code exists in the extension. The 'pro' keyword matches are false positives from JavaScript's hasOwnProperty() method and base64-encoded metadata. All extension features (host lookup, port display, vulnerability check, context menu search) are available without any payment. Note: Shodan.io as a service has paid API credits/membership, but this extension uses only the free InternetDB and GeoNet APIs.

置信度: 90
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension calls Shodan's public free APIs (internetdb.shodan.io, geonet.shodan.io) without any authentication. There is no login UI, no auth tokens, no API key input, and no credential storage anywhere in the source code. The core workflow (looking up host info for the current tab) works entirely without an account.

权限风险

中风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：tabs
同时具备浏览数据与站点访问能力

发布者

Shodan

邮箱: [email protected]
电话: --
地址: 4301 NE 4th Street #2490 Renton, WA 98059 US

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Shodan

Shodan 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

Hack-Tools

Vulners Web Scanner

OWASP Penetration Testing Kit

HackBar

Sputnik

Pulsedive Threat Intelligence