Vidnoz Flex - Video recorder & Video shareSecurity Analysis

Extension uses chrome.cookies.getAll for bulk cookie access and sends data to external servers — high risk of session token theft.

Extension has access to all sites and captures keyboard input — behavior consistent with a keylogger.

Dynamically creates script elements, potentially loading external malicious code.

Creates functions from strings, similar to eval(), often used to hide malicious code.

Accesses browser cookies programmatically, could be used to steal session tokens.

Injects and executes scripts in web pages programmatically.

Dynamically sets a script's src attribute to load external code at runtime.

Listens for keyboard events, a common technique used by keyloggers.

Uses XMLHttpRequest to make network calls.

Modifies window.location to redirect the user, potentially to phishing or malicious pages.

Sends messages via Chrome runtime, could communicate with external services.

Decodes base64 data, commonly used to hide malicious payloads.

Line exceeds 5000 characters (entropy: 5.290012408991422)

Sets innerHTML directly, which can lead to XSS if used with untrusted data.

Reads or writes to localStorage, which may contain sensitive site data.

String with entropy 6 bits — may be encoded/encrypted data

object-src is not set to 'none'. Plugins like Flash can be embedded, which may allow code execution.

Extension accepts messages from 2 external pattern(s). Verify these are trusted origins.

3rd/jQuery/jquery.min.js

Src/js/background.js