稳定信号未识别到付费功能中风险权限组合

Detectify Recorder

Detectify Recorder allows you to record interactions with a website which Application Scanning can use during security testing.

用户数1K当前公开安装规模

评分5.0商店平均评分

评论数4公开评论体量

Manifest 版本V3插件平台版本

7日增长0近 7 天净增用户

7日增长率0%相对周增长速度

视觉预览

Detectify Recorder 媒体预览

4 项素材

趋势

用户增长趋势

按已采集快照查看用户数变化。

用户增长趋势

评分趋势

近 7 日评分趋势

展示最近 7 日窗口内已采集的评分快照，辅助判断近期评分是否稳定。

7 日评分变化

起始值

5.00

日/周/月增长表现

同口径展示 1 天、7 天、30 天的绝对增长与增长率。

1日增长暂无数据

----

7日增长持平

00%

30日增长暂无数据

----

技术摘要

版本、语言与抓取信息

查看发布时间、版本、支持语言、最近更新和抓取时间。

版本4.5.2

ManifestV3

大小339KiB

语言数1English

发布时间--

插件简介

查看插件说明、主要功能和适用场景。

The Detectify Recorder extension is part of Detectify’s Application Scanning product. This extension records interactions with web pages that can then be replayed during scans. Recordings produced by this extension can be used for both Recorded Login and Recording Crawling.

RECORDED LOGIN

Recorded Login makes it possible to scan for vulnerabilities behind a login page. You can use the extension to record yourself logging in. Upload this recording to Detectify to include in scans.

RECORDED CRAWLING

Recorded Crawling captures a sequence of actions that will be recreated during Application Scanning. You can use the extension to record a specific flow of actions that Detectify’s crawler might otherwise miss, such as filling out complicated forms.

Not sure if you need Detectify Recorder? Get in contact with our support team: [email protected].

评价

同类与相关插件

查看 Chrome 商店详情页中的相关产品。

OWASP Penetration Testing Kit

开发者工具 / Developer Tools

OWASP Penetration Testing Kit

Vulners Web Scanner

工作流程与规划 / Workflow & Planning

Tiny vulnerability scanner based on vulners.com vulnerability database. Passively scan websites while you surf internet!

Snyk API & Web Sequence Recorder

工作流程与规划 / Workflow & Planning

You can use Snyk API & Web Sequence Recorder to save and export a login or navigation sequence to be replayed during scans. To…

Login Recorder for Burp Suite

开发者工具 / Developer Tools

Improve your Burp Suite scan coverage by manually capturing how to perform complex actions on your website.

Qualys Browser Recorder

开发者工具 / Developer Tools

Qualys Browser Recorder is a free browser extension to record & play back scripts of any web application.

CSP Evaluator

开发者工具 / Developer Tools

CSP Evaluator is a tool that allows developers to check if a Content Security Policy (CSP) serves as mitigation against XSS attacks.

AI 产品解读

Browser interaction recording for security scanning

Allows security testers to record user interactions (clicks, inputs, navigation) on web applications so that these sequences can be replayed by Detectify's Application Scanning engine. This solves the problem of crawlers missing complex flows or failing to authenticate behind login pages.

1. User installs extension. 2. User navigates to target website. 3. User clicks extension icon to start recording. 4. User performs actions (login, form filling, navigation). 5. Extension captures DOM interactions and generates selectors. 6. User stops recording. 7. Recording is saved locally and can be uploaded to Detectify platform for scanning.

目标用户: Security engineers / Penetration testers / Application security analysts

The extension is heavily minified/obfuscated (especially popup.js), making deep logic analysis difficult. However, the core recording mechanism in background.js and content.js is clear. No network requests to Detectify API endpoints were found in the source, suggesting the upload step might happen via the web UI or a separate mechanism not included in this extension package.

付费分析

未识别到付费功能

The extension source code contains no references to payment gateways, subscription management, license keys, or premium feature gating. The keywords 'pro' and 'license' found in the static analysis correspond to React library headers (e.g., 'react.production.min.js', 'MIT license') and are not related to the extension's business model. While Detectify as a service likely has paid plans, the extension itself appears to be a free utility tool provided by the vendor to facilitate scanning, with no code indicating it charges users or gates features behind a paywall.

置信度: 90
支付平台: --
来源: AI / 高
需要登录: 是
登录理由: The extension is a recording tool for Detectify's Application Scanning service. The store description explicitly states that recordings are uploaded to Detectify to be used in scans. The extension generates an `authToken` (background.js) to identify the recording session, but the actual processing, storage, and scanning happen on the Detectify platform. To use the recordings (e.g., for 'Recorded Login' or 'Recorded Crawling'), the user must have an account on the Detectify destination service. The extension itself does not implement its own login UI, but the workflow is incomplete without the destination service account.

权限风险

中风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

扩展能力较强：tabs、storage

发布者

detectify-team

Detectify AB

邮箱: [email protected]
电话: +46707578022
地址: Medborgarplatsen 25 Stockholm 118 72 SE

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Detectify Recorder

Detectify Recorder 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

OWASP Penetration Testing Kit

Vulners Web Scanner

Snyk API & Web Sequence Recorder

Login Recorder for Burp Suite

Qualys Browser Recorder

CSP Evaluator