2

I am trying to check if I installed a malicious chrome extension which can steal credit card data. That may be some extension that has an access to all data on all sites. chrome:://extensions does not seem to have this data. How can I check which data is available to google chrome extension?

1
  • 1
    When you install an extension Chrome will indicate what it can access.
    – Ramhound
    Jan 17, 2013 at 16:10

1 Answer 1

0

That may be some extension that has an access to all data on all sites.

The premise that extension requests permissions and hence can steal your data is false. Having said that, if you want to check the permissions, then while installing you get a list of things the Extension can access.

To review this post installation, Head over to the Extensions page, chrome://extensions.

enter image description here

Click on the "Visit Website" & then on the details tab.

enter image description here

You'll see the permissions listing on the lower right corner.

enter image description here.

Another way is to head over to %localappdata%\Google\Chrome\User Data\Default\Extensions\id where id is the id below the extension(to show the id, Developer mode tickbox must be checked. From this folder, you can examine the manifest file to see what it requests. Of course, you can go one step further & just examine the entire extension source code itself.

1
  • 3
    Why is my premise false? "The premise that extension requests permissions and hence can steal your data is false." If the extension has access to all data on all web-sites therefore it can access my credit-card data, right? Therefore it can transfer this data to own server. Where is the mistake?
    – Ayrat
    Jan 18, 2013 at 13:34

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .