降温信号未识别到付费功能高风险权限组合

Gecko

Automated CSPT discovery tool

用户数564当前公开安装规模

评分5.0商店平均评分

评论数3公开评论体量

Manifest 版本V3插件平台版本

7日增长-12近 7 天净增用户

7日增长率-2.08%相对周增长速度

视觉预览

Gecko 媒体预览

1 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

5.00

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长减少

-7-1.23%

7日增长减少

-12-2.08%

30日增长减少

-20-3.42%

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本1.6.0

ManifestV3

大小706KiB

语言数1English

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

Gecko is an open-source (https://github.com/vitorfhc/gecko/) powerful Chrome extension designed for web security enthusiasts and professionals. Effortlessly detect client-side path traversal vulnerabilities directly within your browser.

Key Features:

- Comprehensive UI: Clearly view and manage all security findings in one intuitive interface.

- Easy Configuration: Quickly customize detection settings through a convenient popup.

- Real-Time Detection: Automatically intercept HTTP requests to identify client-side path traversals.

- Partial Matching: Supports partial match detection to enhance coverage and precision.

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

S3BucketList

开发者工具 / Developer Tools

S3BucketList automatically scans network requests made by your browser to detect Amazon S3 bucket URLs

FindSomething

开发者工具 / Developer Tools

免费增值置信度 64

Find interesting things in the webpage's source code or JavaScript

Caido Extension

开发者工具 / Developer Tools

Browser extension to proxy to Caido

rep+

开发者工具 / Developer Tools

rep+ - Capture, modify, and replay HTTP requests in Chrome DevTools with AI-powered security analysis.

Endpoint Extractor

开发者工具 / Developer Tools

Extracts endpoints from the current page.

Jsmon Extension

开发者工具 / Developer Tools

Security Scans on your browser's network history in the background

AI 产品解读

Automated Client-Side Path Traversal (CSPT) vulnerability discovery

Helps web security professionals and enthusiasts detect client-side path traversal vulnerabilities in web applications directly within the browser, without needing external tools.

1. User installs the extension. 2. Extension registers as a DevTools panel. 3. When browsing, the service worker intercepts HTTP requests. 4. It analyzes URLs (query parameters, path segments) against the current page's URL to detect potential client-side path traversal patterns. 5. Findings are stored in local storage and displayed in the DevTools panel UI. 6. Users can configure detection settings via the popup.

目标用户: Web security enthusiasts / Security professionals / Web developers

The main JS files (panel.js, popup.js, sw.js) are minified/bundled, making it difficult to trace all logic paths. However, the absence of network request libraries (fetch, axios) and auth-related code in the service worker strongly indicates no external API calls or login requirements.
The extension uses React for UI, which is standard for modern extensions and does not imply paid features.

付费分析

未识别到付费功能

The extension is described as open-source on GitHub. No payment platforms, subscription logic, or paid feature gating was found in the code. The 'pro' and 'license' keyword matches are from React library license files (react.production.min.js, etc.) and are not related to paid features of the extension itself.

置信度: 95
支付平台: --
来源: AI / 高
需要登录: 否
登录理由: The extension is a local security scanning tool that intercepts browser requests using webRequest API. It stores settings and findings in local storage. There is no code for authentication, login UI, or external account creation. The extension works entirely offline within the browser context.

权限风险

高风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：activeTab、webRequest、storage
主机权限覆盖范围较宽

发布者

独立发布者

邮箱: [email protected]
电话: --
地址: --

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Gecko

Gecko 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

S3BucketList

FindSomething

Caido Extension

rep+

Endpoint Extractor

Jsmon Extension