Modern browsers (Chrome, Edge, etc.) dropped support for Java applets, which were previously required to run electronic signature and cryptographic operations for Kazakhstani banking and government e-security services. This extension replaces the Java applet mechanism by using Chrome's native messaging to relay commands to a locally installed native client.

1. User visits a supported Kazakhstani banking or e-security website. 2. The website's JavaScript sends an external message to the extension to check if the extension is installed (checkExt). 3. The extension checks if the native host application is available (checkHost). 4. If available, the extension connects to the native messaging host and relays commands (e.g., for electronic signing). 5. For some operations, the extension proxies HTTP requests to localhost where a local service runs. 6. The native host handles cryptographic operations and returns results back through the extension to the web page.

目标用户: Users of Kazakhstani banking services (BCC, Halyk Bank, CenterCredit, etc.) / Users of Kazakhstani government e-security and digital signature services / Users who need to sign documents electronically in Kazakhstani systems without Java-capable browsers

Cannot verify the native host application (kz.akkamal.clientloader) behavior or its licensing model
Cannot determine if any destination banking services offer unauthenticated access
The verified_contents.json contained a false-positive 'pro' keyword match in base64-encoded content which was excluded from analysis

付费分析

未识别到付费功能

No payment-related code, billing APIs, subscription logic, premium feature gates, or upgrade UI found in the extension source. The extension is a simple native messaging bridge with no monetization mechanism. The deterministic paid keyword 'pro' in verified_contents.json is a false positive (appears in base64-encoded 'payload' content).

置信度: 90
支付平台: --
来源: AI / 高
需要登录: 是
登录理由: The extension itself has no login UI, but it is a bridge/loader that connects to Kazakhstani banking and e-security websites (ib.bcc.kz, myhalyk.kz, halykbank.kz, e-security.kz, service.mysign.kz, etc.). The core workflow — using electronic signatures and banking services through these sites — requires authentication on the destination services. The extension cannot function without being triggered by these authenticated web applications.

权限风险

高风险权限组合

根据声明权限和站点访问权限，评估插件的访问范围与潜在敏感度。

敏感权限：nativeMessaging

发布者

Ak Kamal Security LLP

独立发布者

邮箱: [email protected]
电话: --
地址: ул. Кекилбаева, 257 Алматы 050000 KZ

上面的公开联系方式保持可见；开发者组合页对付费账号开放。

查看开发者组合页

权限

站点访问

Ak Kamal e-Security Client Loader

Ak Kamal e-Security Client Loader 媒体预览

用户增长趋势

用户增长趋势

近 7 日评分趋势

7 日评分变化

日/周/月增长表现

版本、语言与抓取信息

插件简介

最新评论快照

同类与相关插件

Помощник диагностики

1C:Enterprise extension

ESEP Crypto Extension

Контур.Плагин

ID2 Web

Qui-Quo