Package proposal: chrome.extensions.vm

[Ana06]

Details

For dynamic analysis/debugging of credentials stealers, I find it useful to have some Chrome extensions installed like crypto wallets and password managers. What about installing some of the common ones in a new chrome.extensions.vm package? Ideally they should be configured with a testing/fake wallet (or password database) to ensure the credentials stealers find something to steal.

I suggest starting with the following popular crypto wallet extensions that I have seen recently in crypto wallet stealers:

• MetaMask
• Phantom
• Binance

We could also consider:

• Avira Password Manager
• KeePassXC
• Yoroi
• XDEFI

@vm-packages what do you think? Any other extensions that you would like to have installed?

[mr-tz]

Seems too niche to me to spend a lot of time on creating this. If it's easy to add extensions though, ok.

[Ana06]

I don't think we need a lot of time. I think installing extension is easy, it is likely just:

1. Download the extension .zip or .crx
2. run chrome using the --load-extension argument.

Configuring the extensions to include test databases/wallets may be a bit more of work. But having the extensions installed without test data would be already good. We could start with the extensions that are easier.