Skip to content

Simple URL's security score check tool. (implement by Golang and Chrome Extension.)

License

Notifications You must be signed in to change notification settings

yasutakatou/goScoreExtension

Repository files navigation

goScore (Chrome Extension)

Simple URL's security score check tool. (implement by Golang and Chrome Extension.).

solution

When you're search knowledge, suddenly you may see a alert by Security Scan tool.
You have unfortunately displayed a site that contains a malware script.
But you've search a lot of for learn. I don't blame you.

Can't we at least easily check if it's suspicious before we open it?

I created this tool with that in mind for you!

features

When you right-click and select context menu, it opens a temporary tab before URL be opened.
In that tab, request Golang API on server and will check the following.

  • Can name resolve on the Secure DNS server?
  • Is SSL certificate is not free type?
  • Is higher rank search results on search engines?

Check results are displayed with a score(star rate).

installation

download extension from release page save binary file, manually install method on Chrome extension.

uninstall

use app uninstall method on Chrome extension.

usecase

0. prepare Cert file

You prepare cert file beforehand. (use mkcert and such more)

1. prepare server

  • run server and space or enter press will display ip addres and port.

1

2. setting on Chrome extension

  • input server address to chrome extension.

2a

  • in case of success, it will be added.

2b

3. Check URL

  • in case of checking url, right click on link, display context menu, send to server.

3a

  • new tab will open, waiting for making score from server.

3b

  • score displayed.

3c

If you click center link, go to original URL.
(So, You can check before we open it.)

note) if url cached, server return old result. So, it's fast.

problem

  • When add server to extension, following message displaying!

YYYY/MM/DD HH:MM:SS http: TLS handshake error from XXX.XXX.XXX.XXX:XXXXX: remote error: tls: unknown certificate

If you use Self-signed cert file, Chrome must trusted this cert.
You have to access endpoint once by manualy.

If alert from Chrome and you continue access, message will not displayed.

FYI (many thanks!)

LICENSE

MIT License

About

Simple URL's security score check tool. (implement by Golang and Chrome Extension.)

Topics

Resources

License

Stars

Watchers

Forks

Packages

No packages published