A new tool for Penetration testing has been released. The tool comes as a Chrome extension and can be used to search for vulnerabilities. Microbe can be used by security experts for multiple purposes.
Developed by Cosmin Gheorghita, a 19-year-old developer from Romania, Microbe can be used to detect vulnerabilities that allow SQL Injections, as well as to analyze and modify requests and HTTP headers.
The multi-tool also brings a cookie manager, a form handler, a proxy manager, a coding multi-tool called Krypton, a section for enabling or disabling various elements (cookies, JavaScript, browser plugins), as well as override methods and queries for developing SQL Injection syntaxes. Microbe supports functions with shortcodes.
Once you install Microbe, you can access it on a web page by right-clicking and selecting Inspect Element. Then, in the devtools browser, you should see a new tab called Microbe.
You can only access the Chrome extension through the Element Inspector because, for security reasons, Google has banned users from accessing the devtools page.
Security tip: Do not install the extension on systems that contain your personal data, as it requests access to a lot of it. See the image below.
What does Microbe contain?
1. Enable/Disable the following for the visited page:
– CSS;
– JavaScript?
– Popups?
– Images;
– Cookies?
– Plugins.
2. Enable/Disable the navigation history.
3. Use a custom User Agent.
4. Setup a Proxy.
5.1. Encode/decode strings using the following ciphers:
– Binary;
– HEX?
– Base64?
– Rot13?
– ASCII codes?
– URL.
5.2. Compute MD5, SHA1 and SHA256 checksums for a given string.
Source: secnews.gr
