icibkhaehdofmcbfjfpppogioidkilib
Detects zero-width characters, highlights the characters and containing DOM element, and allows sanitization and copying of text. Detects zero-width characters on a page. * Highlights zero-width characters. * Highlights the DOM element containing zero-width characters. * Displays a warning at bottom-right of element. * Select text and right-click to sanitize and copy.
PassLok Image Steganography
The reigning champion of image steganography PassLok Stego is a specialized tool for the secure embedding of data within digital images. It utilizes an enhanced implementation of A. Westfeld's F5 algorithm, designed to mitigate statistical traces detectable through standard steganalysis. This methodology was presented at the ForenSecure 2017 conference on Cyber Forensics and Information Security. ARCHITECTURE: This extension operates as a purely client-side utility. All cryptographic and embedding operations occur within the browser's local memory; no external network calls are required for core functionality. DATA DISTRIBUTION: The engine employs a Pseudorandom Number Generator (PRNG) to distribute hidden data across image pixels. This non-linear distribution is a critical component in providing resistance to forensic discovery. PLAUSIBLE DENIABILITY: The implementation supports the embedding of a short secondary message protected by an independent password. This feature is designed for high-risk scenarios where the presence of the primary hidden message may be compromised. FORMAT SUPPORT: Data can be embedded into JPG or PNG carriers. PNG is recommended for larger data payloads where pixel-perfect integrity is required. ENTROPY HARDENING: We recommend the use of high-entropy passwords to initialize the embedding process. Without the correct key, it is computationally difficult to distinguish an altered image from a standard carrier. Input or load the target data into the primary interface. Select a cover image (JPG or PNG) to serve as the carrier. Define the initialization password. Execute the "Hide into PNG" or "Hide into JPG" routine. Save the resulting image locally via the browser's context menu. Load the carrier image containing the hidden data. Provide the original initialization password. Ensure the "Compress" and "Smart Pwd" parameters match the original embedding settings. Execute "Reveal" to extract the data payload. LICENSE AND METADATA AUTHOR: Francisco Ruiz, Associate Professor at the Illinois Institute of Technology. LICENSE: Open Source software released under the GNU General Public License v3.0. ECOSYSTEM INTEGRATION: The algorithm used here serves as the core steganography engine for the Privacy Bar extension (https://chromewebstore.google.com/detail/privacy-bar/objpfdibjogbdpjjpomnoaflkgdeaanb). AUDIT AND ADOPTION: The source code (specifically plstego.js) is available for public audit and community adoption on GitHub at: https://github.com/fruiz500/PassLok-stego.
d3coder
Encoding/Decoding Plugin for various types of encoding like base64, rot13 or unix timestamp conversion This extension enables you to encode and decode selected text via the context menu. This reduces the time you spend on looking up values and gives you more time to concentrate on the important things of development. The context menu this extension enables is customizable through the options page. To get there either click on the item or go to Wrench -> Tools -> Extensions -> d3coder options. Via the popup you are able to choose between four message types: alert the result, adding a DIV-element to the bottom of the page, via console.log() or replacing the selected text on the page. You can also deactivate functions(e.g. if you don't need them and want to free the space they use). The current version has implemented the following en-/decoding functions:
DotGit
An extension for checking if .git is exposed in visited websites An extension for checking if .git is exposed in visited websites - Check if a .git/.svn/.hg folder exists for each site you visit - Check if a .env file exists for each site you visit - Check if a .DS_Store file exists for each site you visit - Check if the site is open source (github/gitlab) - Check if the site has security.txt - You will be notified when a folder is found - List of exposed sites found - Download the entire .git folder in zip format, even if the files are not listed on the site - View .git/config with one click - Options for: colors, notifications and downloads Some checks are turned off by default, open the settings to turn them on Source code: https://github.com/davtur19/DotGit
PhotOSINT
OSINT tool for images. Scans page for images with EXIF metadata, while browsing. Also has context menu options for images. Open source OSINT tool for images. Scans page for images with EXIF metadata, while browsing, and shows all images found with EXIF data on popup window. Also provides context menu options for images such as reverse image search in different search engines, and metadata viewer.
