vladignatyev / crx-extractor

CRX Extractor downloads and extracts Chrome Extensions and its source code

CRX Extractor

CRX Extractor is an online tool helping people understand internals of any Chrome Extension published at Chrome WebStore. CRX Extractor can download .CRX file, get the source code from .CRX file and save .CRX Chrome Extension. Try it yourself at http://crxextractor.com

How it works?

.crx file format is documented in Google official documentation. This website has a bunch of Javascript that deals with parsing the original .crx file format: it is extracting the archived part of the file, unzip it and serve. It works completely in browser, without any server-side. That approach has its own benefits and drawbacks.

Motivation

I created this tool, when I was trying to restore the source code of my own Chrome Extension, that I've published on Chrome WebStore. Unfortunately, some options were available, but all of them use server-side and tons of ads here and there. I tried to change this. When I looked further into .crx extensions, I found some interesting concerns related to security and privacy.

Where to learn more?

At the CRX Extractor website there are a lot of information about .crx files and the project in general. Just go and try.

How can I help to the project?

Add issue if you want any additional features. I plan to implement some kind of inspection of the Chrome Extension, that will allow to analyze source code for possible fishing and other leaches.

Donate BTC: 1CrxExtJnRSLRf4rTBoWM65RC1LC3QaCtS

crx-extractor's Issues

Nice Job! Source release?

I would love to use this in a classroom environment.

When do you think you will upload the source?

Since internet is very limited in the classroom like to run on local server and provide crx extensions for students to dissect / learn from.

Thanks,

Woody

Support new Chrome webstore URL

https://crxextractor.com/

Old: https://chrome.google.com/webstore/detail/custom-cursor-for-chrome/ogdlpmhglpejoiomcodnpjnfgcpmgale

New: https://chromewebstore.google.com/detail/custom-cursor-for-chrome/ogdlpmhglpejoiomcodnpjnfgcpmgale

uploaded crx files incorrectly failing verification

I used http://crxextractor.com/ to download a number of extensions. Each of those was dragged to the decompile area, were sent to the host, and...were rejected as being invalid containers. Systems is Win8.1x64 FF56.0.2

Any idea why this is happening and how to prevent the false negatives?

Projet Idea / Help: download from the store and upoad to github

My Idea (all done with github actions)

• Pull crx file from chrome web store
• create zip
• unzip
• upload to github
• check changes and commit only changes
• write commit message with llm

My Reasoning for that is that I want to look at the changes made, before installing a new version of an extension. Does anyone have tools, ideas for improvement, pipelines?

There are many cases where a useful extension became malware How Browser Extensions Turn Into Malware

@vladignatyev could you point me into the right direction. I havent looked into the code just yet. Would it be possible to create a github action from that?

How to recompile .crx ?

I extracted .crx file using your website.Now i want to recompile this source to .crx .So how can i do it?

I get 0-byte zip files

OS: Fedora 29
Browser: (any)

• Firefox 66.0.3 64-bit
• Brave Version 0.62.51 Chromium: 73.0.3683.103 (Official Build) (64-bit)

Extension: https://github.com/xbrowsersync/app/releases/tag/v1.5.0beta

Doesn't handle localized webstore URLs

The query part from the webstore URLs isn't stripped off correctly.

To give you an example, pasting the following URL works:

https://chrome.google.com/webstore/detail/right-inbox-for-gmail/mflnemhkomgploogccdmcloekbloobgb

But this one does not:

https://chrome.google.com/webstore/detail/right-inbox-for-gmail/mflnemhkomgploogccdmcloekbloobgb?hl=de

Also, why do I need to download and re-upload the crx file? It should get

jquery not loading

Hi, your website isn't working, nothing happens when i click on LET'S START button, the console says: Failed to load resource: net::ERR_CONTENT_DECODING_FAILED jquery.min.js

Website is dead ?

Hi guy, I love your project. My browser does not allow to install some extension with response "They are malware". I know your website and it can add bypass that browser. But website look like dead. Could you help me.
Website: https://crxextractor.com/
Dear.

Allow Chromium web browsers to download crx files (Save to disk) instead of trigger install when button 'Get .CRX' is pressed

This seems to affect any Chromium web browser.

virus mining

virus mining