About Chrome web shop
Like Chrome components and Chrome Web Store extensions were quite well protected. When Chrome components are updated, the Client Update Protocol signs each request and response. Even if an attacker could intercept HTTPS traffic, they could not tamper with these signed responses.I did find one area that was largely unprotected. Chrome allows companies to define policies for their enterprise extensions. These extensions can be automatically installed and updated from an internal company update server. I came up with an attack scenario for these extensions involving a coffee shop.In this scenario, an employee heads over to a coffee shop with their laptop. A local attacker, also in this coffee shop, sets up their IP or host name to match the company's internal update server. The next time Chrome runs extension updates on the employee's device, it will download the maliciously modified extension from the attacker's device. Because it still contains a valid signature, the employee's laptop will upgrade to the malicious extension. The attacker could use this extension to perform a variety of attacks, including monitoring the employee’s web activity and modifying visited pages to steal passwords and session cookies, potentially gaining access to private servers and devices on the company’s internal network.Here's a video walkthrough showcasing the vulnerability:After proving that this scenario could be exploited using a local HTTP update server, I finished my report to Google describing the issue. Within 24 hours, they had patched the Chromium source code to fix the issue and soon released the fix publicly
Key features of the Chrome web shop that are enabled through these drivers include:
- Shop Deals - Chrome Web Store
- Eureka Shopping - Chrome Web Store
- Chrome Shopping - Chrome Web Store
- Citi Shop℠: Smarter Online Shopping - Chrome Web
- CNET Shopping - Chrome Web Store
- Yahoo Shopping - Chrome Web Store
- Chrome Web Store - Shop and save
Use casesNot being used or transferred for purposes that are unrelated to the item's core functionalityNot being used or transferred to determine creditworthiness or for lending purposesSupportRelatedPindodo - Pinterest Ranking/Keyword Tool4.7(12)Get huge traffic with your Pinterest pinsLBC TEAM CHECKER5.0(16)Effortlessly check your team with just one click for the LBC community!EHunt - Etsy™ Rank Tool4.1(76)Product & Shop analysis tools for all Etsy sellers. Make it easy to optimize your Etsy rank.AMZ Suggestion Expander3.3(101)Chrome extension to expand the number of search suggestions that are shown in the Amazon search bar.Super Spy HeyEtsy.com Web Extension4.0(16)Streamline your search for potential products on Etsy with the HeyEtsy.com Web Extension. Made By YTuong.meEstatics Extension4.4(33)Gives you the insights needed to skyrocket your Etsy sales.Contai Extractor5.0(11)Extract and save content from web pagesMerch by Amazon Trademark Protection3.5(25)Merch by Amazon Trademark Protection (Merch Informer)Pinterest extra2.2(13)Pinterest extra allows it users to view the analytics of pins aswell as downloading them!PinSort Pro - Sort, Download Images & Videos4.9(17)PinSort Pro: Enhance your Pinterest experience. Sort pins by saves and repins, with the option to easily download images and videos.Pin Generator4.0(2)Generate Pinterest Pins from any website.Merch Research Free4.5(28)AmazonInfringement AmazonShowRank AmazonMerchAlerts ImageDownloadPindodo - Pinterest Ranking/Keyword Tool4.7(12)Get huge traffic with your Pinterest pinsLBC TEAM CHECKER5.0(16)Effortlessly check your team with just one click for the LBC community!EHunt - Etsy™ Rank Tool4.1(76)Product & Shop analysis tools for all Etsy sellers. Make it easy to optimize your Etsy rank.AMZ Suggestion Expander3.3(101)Chrome extension to expand the number of search suggestions that are shown in the Amazon search bar.Super Spy HeyEtsy.com Web Extension4.0(16)Streamline your search for potential products on Etsy with the HeyEtsy.com Web Extension. Made By YTuong.meEstatics Extension4.4(33)Gives you the insights needed to skyrocket your Etsy sales.Contai Extractor5.0(11)Extract and save content from web pagesMerch by Amazon Trademark Protection3.5(25)Merch by Amazon Trademark Protection (Merch Informer)
