← Back to Labs

Browser Extension Attack Path

Trace how a compromised extension moves from installation to privileged access and quiet exfiltration.

Web StoreBrowserExtensionWeb pageAttackerCRX3 (.zip + signature)
Step 1 / 7Install from Web Store

You click "Add to Chrome". The browser downloads a signed extension package from the Chrome Web Store and unpacks it into your profile.

Arrow keys to step through · R to reset

Tap dots to jump to any stage

Read the full article →Take the quiz →