AuRA - Auth. Request Analyser

Semi-automated analysis tool for OAuth 2.0 and OpenID Connect 1.0 Auth Requests.

What is AuRA - Auth. Request Analyser?

AuRA - Auth. Request Analyser is a Chrome extension that offers semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth Requests. It provides detailed analysis, recommendations, and the ability to modify request parameters.

Download

Extension stats

By: https://security.lauritz-holtmann.de

View on Chrome Web Store

Users: 189 ▼ -1

Version: 1.1 (Last updated: 2022-03-30)

Creation date: 2021-11-11

Risk impact: Moderate risk impact

Risk likelihood: Low risk likelihood

Manifest version: 3

Permissions:

tabs
storage
history

Size: 24.80K

Email: su*****@lauritz-holtmann.de

URLs: Website ,Privacy policy

Ranking

# 55462 ▼ 255

Other rankings

#8132 in Developer Tools ▼ 23 #65 in request keyword 22 #247 in developer tools keyword 58 ▲ 10

Other platforms

Not available on Firefox

Not available on Edge

Want to check extension ranking and stats more quickly for other Chrome extensions? Install Chrome-Stats extension to view Chrome-Stats data as you browse the Chrome Web Store.

Extension summary

Analyze keywords

This extensions aims to support the analysis of single sign-on implementations, by offering semi-automated analysis and attack capabilities for OAuth 2.0 and OpenID Connect 1.0 Auth. Requests.

Features: • View request parameters at a glance, either via the popup or the developer tools panel. • Hover over standardised parameters for background information about parameters. • Manually modify request parameters. • Detailed Analysis of request parameters: • Observations: Informational findings within the Auth. Request. • Recommendations: Hardening measures directly identified within the current Auth. Request. • Attacks: Proposed further test cases, can be automatically executed with one click. • Search history for Auth. Request and replay the request. • Indicate with a badge if the currently visited page appears to be an Auth. Request. • Store and reload URL: Can be used as clipboard for one valid request, restore saved URL in case an error causes a redirect. • Manually trigger analysis.