domains / families / security / browser-extension-reverse

browser-extension-reverse

authentic

Authorized reverse engineering of Chrome/Firefox extensions: manifest analysis, background workers, content scripts, and extension-based credential or data-exposure research.

When to use

• Auditing a browser extension's behavior and permissions in an authorized review.
• Investigating how an extension handles credentials or sensitive page data.

When not to use

• Extension stores update frequently; findings can go stale.
• Dynamic analysis requires a profile isolated from personal accounts.

Skill page

Source